Latest Announcements
Awareness
Security Announcement: Double Counter Data Breach
Incident Date: October 4, 2026We want to inform our community about a security incident involving Double Counter, a third-party Discord verification and security bot.On October 4, 2026, Double Counter experienced a targeted cyberattack that compromised parts of its infrastructure. According to the service’s official incident report, the attacker exploited a vulnerability in an analytics tool on an older server and used credentials found there to gain access to its cloud infrastructure.What happened?During the attack, the attacker gained control of Double Counter’s Discord bot token and used it to post invitations to an attacker-controlled Discord server in approximately 50 large Discord communities. The attacker also copied approximately 12 GB of data from a database.The information reported as affected included Discord IDs, usernames, IP addresses, approximate location information, browser-related identifiers, email addresses, and certain customer billing records. Double Counter stated that Discord passwords and full payment-card numbers were not exposed.The company reported that it contained the attack, replaced exposed credentials, restored the service, and implemented additional security monitoring. This incident affected Double Counter’s infrastructure, not Discord’s core systems.What should users do?- Be cautious of unexpected emails or messages referring to Double Counter or Discord.
- Do not click suspicious verification links or invitations.
- Watch for phishing attempts, especially if you used Double Counter or associated services.
- If you manage a Discord server, review the audit logs for suspicious activity on October 4.
