If they were not obliged to collect the data then the data would not be available to be stolen:

The support system was targeted to access user data with a view to extort a financial ransom from Discord, the company stated. Discord said it revoked the third-party provider’s access to its ticketing system and launched an internal investigation, including engaging with law enforcement.

https://www.theguardian.com/games/2025/oct/07/discord-data-breach-proof-of-age-id-leaked