Looks like it was a phishing scam like ryzaadit reported, but I don't understand how they can hack discord accounts like this unless he clicked something.
I would suggest everyone to be careful with discord and telegram, clicking any links and entering their login details.