Discord - Data Breach
Executive Summary
A six-hour breach at Double Counter, a verification service for Discord communities, exposed data from approximately 28 million Discord accounts on October 4th, including usernames, IP addresses, rough locations, email addresses, and VPN detection records. The attacker also fraudulently charged over $7,300 to stored credit cards, though Double Counter states no passwords or card numbers were exposed in the breach. The combination of usernames, IP addresses, and location data could enable trac...
What Happened
On October 4th, 2026, an attacker spent approximately six hours inside Double Counter's infrastructure, a verification service used by Discord communities. The breach exposed data linked to roughly 28 million Discord accounts, including usernames, IP addresses, approximate locations (country, region, city, postal code, ISP), email addresses, and VPN detection records. The attacker also used a stolen bot token to spam approximately 50 large Discord communities and fraudulently charged $7,316 to stored credit cards, though Double Counter reports no passwords or card numbers were exposed.
Who Is Affected
Approximately 28 million Discord users who verified their accounts through Double Counter are affected, with 27 million having IP addresses and location data exposed and about 1 million having email addresses compromised. Users across multiple large Discord communities that use Double Counter for verification and anti-alt account services were impacted. Double Counter confirmed that a separate database containing information on 58 million additional users was not accessed during the breach.
Why It Matters
The combination of Discord usernames, IP addresses, and precise location data creates a detailed profile that could enable tracking and identification of users across different online communities, undermining pseudonymous participation in Discord servers. This breach demonstrates the privacy risks inherent in third-party verification services that aggregate identifying information from millions of users. The six-hour window the attacker had to move through the infrastructure highlights potential weaknesses in detection and response capabilities for services handling sensitive user data at scale.
What You Should Do
If you have used Double Counter to verify your Discord account, change your Discord password immediately and enable two-factor authentication if not already active. Consider using a VPN or privacy-focused browser when participating in Discord communities to minimize future location tracking risks. Monitor your credit card statements for unauthorized charges if you had payment information stored with Double Counter, and contact your card issuer to dispute any fraudulent transactions. Review which Discord servers you have joined and consider whether the exposed combination of your username and location data creates unacceptable privacy risks in specific communities.
Summary generated from verified sources and reviewed before publication. How we summarize.