Double Counter breach: Discord IDs, IP addresses and emails copied

Double Counter, a bot many Discord servers use to block alternate accounts and raids, says an attacker broke into its systems on October 4 and copied data about millions of Discord users. If you’ve ever verified in a server that uses Double Counter, here’s what you should know.

What happened

Double Counter says it was hit by a “deliberate, multi-stage attack” and that the attacker spent close to six hours in its infrastructure, Rock Paper Shotgun reported. The Verge reported that, by the company’s account, the attacker copied about 12 GB of data, took control of the bot’s Discord token to post links in about 50 large servers, and used a stolen payment key to commit fraud on a separate account.

By Double Counter’s own estimates:

• Discord user IDs and usernames for up to about 28 million accounts were partly copied
• IP addresses and approximate location (such as country, region and city) for millions of accounts were partly copied
• around 1 million email addresses were affected

Have I Been Pwned says a set of 275,000 unique email addresses and Discord usernames from the breach has since been published, along with names, countries and postcodes for a small number of paying subscribers. It attributes the breach to a vulnerability in the Metabase analytics tool. Discord says this wasn’t a breach of Discord itself, and has disabled new installs of the app while it looks into it.

What this means for you

Your Discord password wasn’t involved; Double Counter never receives it. But an IP address with a rough location, tied to your Discord username, can help someone work out roughly where you live, which matters if you’ve ever been harassed online. Email addresses tied to Discord usernames also make targeted phishing easier.

What you can do

1. Check your email on Have I Been Pwned to see if it’s in the published set.
2. Be suspicious of Discord DMs or emails about “verification” or server invites, especially ones that appeared on October 4.
3. Turn on two-factor authentication on Discord if you haven’t, and don’t enter your login on pages reached from a link.
4. If you’re worried about your location, consider a VPN for gaming and chat services, and see our guide to opting out of data brokers in Canada to make your home address harder to find.

How Frame helps

Add this breach to a verified email in Frame and Frame shows what it exposed, gives you a short checklist and counts it in your exposure report. Automatic breach lookups aren’t live yet. Frame’s email aliases also let you give apps and bots their own address, so a leak like this one doesn’t point straight to your main inbox. We never collect or store the leaked records themselves.

Sources

• Rock Paper Shotgun, Hackers steal millions of Discord IDs and email addresses in “deliberate, multi-stage attack” on security service Double Counter, October 7, 2026
• The Verge, Discord users’ data was exposed in a breach at server bot Double Counter, October 7, 2026
• Have I Been Pwned, Double Counter Data Breach, added October 7, 2026