Home > News

Popular Discord server bot breach leaks 275,000 email addresses and usernames, including paying subscribers

Double Counter has been breached, leaking Discord emails
Last Updated on
Popular Discord server bot breach leaks 275,000 email addresses and usernames, including paying subscribers
PC Guide is reader-supported. When you buy through links on our site, we may earn an affiliate commission. Read More

New details of a Discord-related security breach have been published by Have I Been Pwned. According to the data breach database, Double Counter, a server protection service (and popular Discord bot), has leaked 274.9k addresses, with “a small number of records belonging to paying subscribers”. The data has been published publicly, with 25% of it already listed in Have I Been Pwned’s database.

Double Counter is used as a Discord security bot designed to “block alt accounts, raids and VPNs in three seconds” as an anti-bot and anti-spam measure for Discord servers. On its site, it says it has protected more than 618,000 servers and verified more than 118 million accounts. It is typically free to use, but does offer Premium tiers to server owners.

Double Counter data breach affects Discord users

In October 2026, the Discord server protection service Double Counter suffered a data breach attributed to a vulnerability in the Metabase analytics tool. In its disclosure notice, Double Counter advised that attackers gained access to a subset of its data. A corpus of data was subsequently published publicly and contained 275k unique email addresses and Discord usernames. A small number of records belonging to paying subscribers whose purchases were processed via Stripe were also present and included names, countries and postcodes.

Source: Have I Been Pwned

Compromised data

  • Email addresses
  • Geographic locations
  • Names
  • Usernames

On the bright side, sensitive data such as passwords or billing information is not reported to have been leaked. Either way, Discord users will want to look out for phishing attempts or otherwise suspicious emails and direct messages on Discord moving forward.

It hasn’t been the greatest week for cybersecurity so far. Just yesterday, an ASOS hack led to customers being sent a threatening message, revealing that user data was compromised. ASOS later published a statement to confirm the breach, saying that “basic personal information” may have been accessed, but it believes more sensitive data is not impacted.


568
Steam Frame without the RAM?

Would you buy a cheaper version of the Steam Frame that doesn’t work standalone?

About the Author

At PC Guide, Jack is mostly responsible for reporting on hardware deals. He also specializes in monitors, TVs, and headsets and can be found putting his findings together in a review or best-of guide.