Discord announced on October 27, 2026, that messages from public channels in its more than 63,000 Discoverable Servers will start appearing in Google and other search engines from mid-December 2026, according to Discord’s official blog. In the US and most other countries, the setting that shares your messages is on by default for adult accounts. To keep new messages off the web, turn off “Show my message content from Discoverable channels on web pages” under User Settings > Data & Privacy.

Key takeaways

• Only public channels in Discoverable Servers are affected. DMs, group DMs, and private servers are not.
• Server Web Pages with AI-generated Channel Summaries go live November 16, 2026. Individual messages follow from mid-December.
• One Discord privacy setting covers every Discoverable Server you belong to.
• Turning the setting off stops future messages from appearing. It does not remove messages already published.
• Discord hides usernames and avatars, but the details inside a message can still identify you.

What Is Changing on Discord, and When

Discord is rolling out search visibility in three stages, starting with admin controls and ending with individual messages. The change covers only Discoverable Servers: communities listed in Discord’s Server Discovery that have at least 1,000 members, are at least eight weeks old, and meet Discord’s activity and safety requirements, according to the Discord blog.

 

Date	What happens	Who controls it
October 27, 2026	Admin controls and the member privacy setting begin rolling out	Server admins and members
November 16, 2026	Every Discoverable Server gets a public Server Web Page, including AI-generated Channel Summaries	Server admins
Mid-December 2026	Individual messages from participating channels begin appearing, rolled out gradually over several weeks	Members (and admins, by channel)

Discord says messages sent before mid-December 2026 won’t be included, whatever your setting. Channels whose content may appear on the web are labeled, so you can see it before you post.

Is Discord Private? What Can Go Public and What Stays Private

Public channels in Discoverable Servers can now reach search engines, but your DMs and private servers stay out of search. Here’s how the change applies, based on the Discord announcement:

Can appear on the web	Stays off the web
Message text in participating public channels of Discoverable Servers (from mid-December 2026)	Direct messages (DMs) and group DMs
AI-generated Channel Summaries of active conversations (from November 16, 2026)	Private servers and servers not listed in Server Discovery
Server Web Pages describing each Discoverable Server	Messages sent before mid-December 2026
	Usernames and avatars, which Discord says won’t be shown
	Messages from accounts in Discord’s teen age group

How to Change Your Discord Privacy Settings to Opt Out

You can opt out of Discord’s search indexing with one toggle, and it applies to every Discoverable Server you’re in. On desktop or the web:

1. Open User Settings. Select the gear icon next to your name at the bottom left of the Discord window.
2. Go to Data & Privacy. It’s listed in the settings menu on the left.
3. Turn off “Show my message content from Discoverable channels on web pages.” This stops messages you send afterward from appearing on Server Web Pages and in search results.
4. If you don’t see the option on the mobile app, try the desktop app or a browser. Log in at discord.com/settings/data-and-privacy. Changes made there apply to your entire account across all devices.

Two things to know before you rely on the switch:

• It only works going forward. According to Discord, messages you sent while the setting was on stay up unless you delete them in Discord.
• It doesn’t cover Channel Summaries. Summaries are controlled by server admins, so a summary can still describe a conversation you took part in.

If you don’t see the setting yet, Discord says controls are rolling out gradually from October 27, 2026. Check again before mid-December, when messages start going live.

If You Run a Server: Use the Web Presence Controls

Server owners and admins decide whether their community appears on the web at all, including the AI-generated summaries members can’t switch off. If you take no action, Discord says public channels stay on and a Server Web Page goes live on November 16, 2026.

1. Open Server Settings > Web Presence.
2. Choose which channels take part, or opt every channel out.
3. Review Channel Summaries. You can change which channels feed them, curate what’s shown, or turn them off.
4. Tell your members. Post a short note explaining what will be public and how members can turn off message sharing.

Why Hidden Usernames Don’t Make You Anonymous

Discord removes usernames and avatars from public pages, but the words in a message can still point to you. Doxxing, the practice of piecing together and publishing someone’s personal details, often starts with small clues spread across many posts.

What’s in a message	How it can identify you
Your city, school, workplace, or gym	Narrows you down to a small group of people
A distinctive phrase, project, or story	Can be matched to your posts on other platforms
Photos and screenshots	Can show faces, locations, or details in the background
Links to your other accounts	Connect your Discord activity to your real name
Dates and plans (“I’m away next week”)	Reveal routines or when your home is empty

Public pages can also be copied by other sites, and search results can lag behind changes, with a removed or changed page often showing in results for a while until a search engine’s crawler revisits it. McAfee’s guide on how to protect yourself from doxxing covers Discord-specific steps, including using a username you don’t use anywhere else.

What to Do If Your Discord Messages Are Already in Search

If you’re reading this after Discord’s mid-December 2026 rollout and your setting was on, messages you’ve sent since then may already be on Server Web Pages and in search results. Turning the setting off now only stops new messages from appearing, so you’ll need to delete the ones you want gone. Messages sent before mid-December aren’t included in search results. Work through the steps that apply:

1. Turn off the Data & Privacy setting so nothing new is shared.
2. Delete messages that reveal personal details. Discord says deleting a message removes it from its public pages.
3. Search for yourself. Look up your username, display name, and any phrases you’ve used to see what’s indexed.
4. Ask Google to refresh old results. After you delete a message, use Google’s Refresh Outdated Content tool so search results stop showing the old text. For personal information that’s still online, see Google’s guide to removing web results.
5. Secure your accounts. If a message exposed an email address or linked account, change those passwords and turn on multi-factor authentication.
6. Keep records. Save screenshots, links, and dates of anything posted about you or any threats you receive.

Is Discord Safe to Use After This Update?

Discord’s search change doesn’t make the platform inherently unsafe, but you do need to stay mindful of what you post and avoid sharing personal information about yourself. Your DMs and private servers are unaffected. Treat anything in a Discoverable Server’s public channels as something anyone could find.

• Post as if your words are searchable. Keep your real name, location, school, and workplace out of public channels.
• Review your server list. Leave Discoverable Servers you no longer use.
• Limit who can DM you. Restrict DMs to friends to cut down on unwanted contact.
• Use a unique username. Don’t reuse a handle that links to your other accounts.
• Turn on two-factor authentication for your Discord account.

Lock Down the Accounts Your Discord Posts Could Lead To

Discord’s toggle only controls Discord. If a public message can be tied to your Instagram, X, or LinkedIn profile, those accounts can fill in your name, photos, location, and contacts. That’s why it’s worth checking privacy settings across all your social accounts, not only the one that changed.

McAfee’s Social Privacy Manager helps you review your social media privacy settings in one place. It scans more than 100 privacy settings across platforms including Facebook, Instagram, LinkedIn, X, Google, and YouTube, suggests changes based on how public you want to be, and applies them in a few clicks. You’ll have to update you Discord privacy settings directly, but Social Privacy Manager can help with your other accounts.

You can make your social media presence safer by setting each profile to private or friends-only, hiding your friends or followers list, removing your location and workplace from public profile fields, and turning off search engine indexing where the platform offers it.

Tips for Parents Whose Teens Use Discord

Teen accounts are excluded entirely. Discord says users in its teen age group can’t enable message sharing until they’re adults. That protection depends on the age on the account, so check that your teen’s birthdate is accurate.

• Talk about what “public” means. Server Web Pages and Channel Summaries may describe conversations in large communities, even when individual messages aren’t shown.
• Know which servers your teen is in. Large public communities are the ones affected.
• Revisit the setting at 18. Discord hasn’t said whether sharing turns on automatically when a teen account becomes an adult account, and the adult default in the US is on.

How to Report Doxxing or Harassment on Discord

If someone uses your public messages to find, threaten, or extort you, report it to the platform and to authorities:

• Discord: right-click (desktop) or press and hold (mobile) a message, then select Report Message, as described in Discord’s guide to reporting content.
• Local police: if you’ve been threatened or your safety is at risk.
• FBI Internet Crime Complaint Center: report extortion or online fraud at ic3.gov.
• FTC: if your identity is misused, report it at IdentityTheft.gov.

The single most useful step is the setting itself. Before mid-December, open User Settings > Data & Privacy, turn off “Show my message content from Discoverable channels on web pages,” and delete any public messages that reveal more about you than you’d want a stranger to find.

FAQ

Will my Discord DMs show up in Google?

No. Discord says DMs, group DMs, and private servers are always private and aren’t part of this change.

Are Discord messages public now?

Messages in public channels are already visible to anyone in the server. From mid-December 2026, messages from participating channels in Discoverable Servers can also appear on the open web and in search, but only for members whose sharing setting is on.

Will my old Discord messages appear in search?

No. Discord says messages sent before mid-December 2026 won’t be included, regardless of your setting.

If I opt out later, are my messages removed?

No. Turning the setting off stops future messages only. Messages already published stay up unless you delete them in Discord, and search results may take time to update.

The post Discord Messages in Google Search: How to Change Your Privacy Settings appeared first on McAfee Blog.

Quest Diagnostics, one of the largest lab testing companies in the US, disclosed in an October 22, 2026, SEC filing that an unauthorized party accessed certain patient records in its Quanum Lab Services Manager (LSM) system. The company’s Quanum security notice says Quest believes protected health information and personal information were involved. The number of affected patients and the specific data taken have not been disclosed, and the investigation is ongoing.

How the Quest Diagnostics Breach Happened and What Was Exposed

The unauthorized access was discovered on October 21, 2026, according to Quest’s SEC filing. Doctors’ offices, health systems, and other Quest clients use Quanum LSM to place lab test orders and to receive and look up results. Patient data inside that system was accessed, the company says, but its other systems were not affected.

According to the notice, the company believes both protected health information (PHI) and personally identifiable information (PII) were involved. Quest has not listed which specific data fields were exposed, and it has not disclosed how many patients were affected. The potential reach is wide: Quest says it serves about half of the physicians and hospitals in the US and touches the lives of one in three American adults each year.

To contain the breach, Quest paused access to Quanum LSM and, as a precaution, to its Essential Insights and LabHQ systems. Its notice says access to all three had been restored as of October 26. The SEC filing adds that Quest notified federal law enforcement and brought in outside cybersecurity experts. As of October 23, no hacking group had publicly claimed the attack. Quest is posting updates on its security notice at questdiagnostics.com/links/quanum-notice.

This is not Quest’s first breach involving patient data. In 2019, about 11.9 million Quest patients were affected by a breach at AMCA, a third-party billing collections vendor. Medical records exposed in older breaches can still be misused today. Health data retains its value to criminals over time, because unlike a credit card number, it cannot be canceled or reissued.

Red Flags: Scams That Follow the Quest Breach

The most immediate risk for most patients is follow-up scams that use the breach as a hook. Quest’s own notice warns people to watch for “breach-notification, credit-monitoring or settlement scams.”

Red Flag	Why It Matters
An email, text, or call about the Quest breach asking you to confirm your Social Security number, insurance ID, or date of birth	Quest has said it will notify affected patients by letter. A message asking you to re-enter personal data is a common way to collect more of it.
A credit or identity monitoring offer that asks for payment or sends you to an unfamiliar link	Quest says its notification letters will describe available resources, including credit and identity monitoring. Verify any offer through Quest’s official website or phone number.
A “class action settlement” message asking for a fee or your bank details	Quest’s notice specifically flags settlement scams. Treat any request to pay to join a settlement as fraud.
A “your lab results are ready” message with a login link you didn’t expect	Scammers borrow the look of real health notices. Log in only through an app or website you already use.
A bill or Explanation of Benefits (EOB) for lab tests or services you didn’t get	Charges for care you never received can mean someone is using your medical identity.
A debt collector contacting you about medical debt you don’t owe	Collection notices for unfamiliar medical debt can mean someone received care or opened accounts in your name.

 

How to Protect Yourself After the Quest Diagnostics Breach

If you’ve had lab work processed by Quest, take these steps now, even if you don’t yet know whether your records were involved.

1. Get updates from Quest directly. Use the official notice at questdiagnostics.com/links/quanum-notice or call Quest at 1-866-MYQUEST. If someone contacts you first about the breach via call, text, or email, don’t use any phone number or click any link they provide. Contact Quest through these official channels instead.
2. Watch your mail for a notification letter. Quest says it will send letters to affected patients once its investigation identifies them. If a letter includes a monitoring enrollment code, confirm it by contacting Quest through its official channels before you enroll.
3. Review your medical bills and EOBs. Look for tests, visits, or prescriptions you don’t recognize. This is one of the earliest places medical identity theft shows up.
4. Check your credit reports. You can get free reports from Equifax, Experian, and TransUnion at AnnualCreditReport.com. Look for accounts or medical collections you don’t recognize.
5. Consider a credit freeze. A freeze is free and blocks new credit accounts from being opened in your name. You can lift it temporarily when you need to apply for credit.
6. Secure your health accounts. Use a unique password for any patient portal or health app, and turn on multi-factor authentication where it’s available. A password manager makes it easier to keep up with unique passwords.
7. Be skeptical of unexpected breach messages. Quest has said it will notify affected patients by letter. If an email, text, or call asks you to act quickly, click a link, or share personal or payment details, don’t respond. Contact Quest directly using the number on its official website.

What to Do If Your Information Was Exposed or You’ve Already Been Targeted

Your next steps depend on what has happened so far:

• If you received a Quest notification letter: Follow its instructions, note any enrollment deadline, and keep the letter with your records.
• If you shared information with a scammer: Stop contact. Call your bank, card issuer, or payment app right away to try to stop or reverse any payments.
• If you gave away a password: Change it on that account and any account that uses the same password, and turn on multi-factor authentication.
• If you see signs of medical identity theft: The FTC recommends asking each doctor, lab, pharmacy, and insurer involved for copies of your records and reporting any errors in writing. If a provider doesn’t send your records within 30 days of a written request, you can file a complaint with the HHS Office for Civil Rights.
• If fraudulent claims appear: Call your health insurer’s fraud line, using the number on your insurance card.
• If your identity data was exposed or misused: Place a credit freeze or fraud alert with Equifax, Experian, and TransUnion, and create a recovery plan at IdentityTheft.gov.
• Keep records: Save the breach letter, suspicious messages, phone numbers, bills, EOBs, and notes from every call.

How to Report It

Report breach-related fraud and identity theft to the right channel:

• Medical or other identity theft: IdentityTheft.gov
• Scam messages or calls using the Quest breach: FTC at ReportFraud.ftc.gov
• Online fraud that cost you money: FBI Internet Crime Complaint Center at ic3.gov
• Concerns about how your health information was handled: HHS Office for Civil Rights at hhs.gov/ocr/complaints
• Money lost or threats made: Your local police department

Quest is still determining whose records were accessed, so the most useful step today is to treat every unexpected message about this breach as suspect. Get information only from Quest’s official notice or phone number, and check your bills, EOBs, and credit reports for activity you don’t recognize.

FAQ

Was my information exposed in the Quest Diagnostics breach?

Quest has not disclosed how many patients were affected. It says it will send notification letters to affected patients once its investigation identifies them.

What is Quanum Lab Services Manager?

Quanum LSM is a Quest system that healthcare providers use to place lab test orders and to receive and look up results. Quest describes it as a system its clients use, so patients’ records can be in it when their provider orders tests through it.

Will Quest offer free credit monitoring?

Quest’s notice says its letters will describe available resources, including credit and identity monitoring. Enrollment details have not been published, so verify any offer through Quest’s official channels.

Is this related to the 2019 Quest data breach?

No. The 2019 breach happened at AMCA, a third-party billing collections vendor. The 2026 incident involves Quest’s own Quanum LSM system.

The post Quest Diagnostics Data Breach Exposes Patient Records: How to Stay Safe appeared first on McAfee Blog.