An attacker spent nearly six hours inside Double Counter, a verification bot used by Discord communities, after breaking into an abandoned server and an exposed analytics tool to steal admin credentials. Data tied to about 28 million Discord accounts was exposed, including roughly 1 million email addresses. Passwords and card numbers were not stored.
What to do: Service restored; about $7,316 in fraudulent charges reported.
· 32 days ago · about 28 million Discord accounts, about 1 million emails · Cybernews
On X
@Pirat_Nationunverified
Double Counter has confirmed a serious security breach affecting its Discord protection service.
Why this score
Tens of millions of accounts (impact 3), completed intrusion (exploitability 2), general sector (criticality 0).