Popular Discord server bot breach leaks 275,000 email addresses and usernames, including paying subscribers
New details of a Discord-related security breach have been published by Have I Been Pwned. According to the data breach database, Double Counter, a server protection service (and popular Discord bot), has leaked 274.9k addresses, with “a small number of records belonging to paying subscribers”. The data has been published publicly, with 25% of it already listed in Have I Been Pwned’s database.
Double Counter is used as a Discord security bot designed to “block alt accounts, raids and VPNs in three seconds” as an anti-bot and anti-spam measure for Discord servers. On its site, it says it has protected more than 618,000 servers and verified more than 118 million accounts. It is typically free to use, but does offer Premium tiers to server owners.
Double Counter data breach affects Discord users
In October 2026, the Discord server protection service Double Counter suffered a data breach attributed to a vulnerability in the Metabase analytics tool. In its disclosure notice, Double Counter advised that attackers gained access to a subset of its data. A corpus of data was subsequently published publicly and contained 275k unique email addresses and Discord usernames. A small number of records belonging to paying subscribers whose purchases were processed via Stripe were also present and included names, countries and postcodes.
Source: Have I Been Pwned
Compromised data
- Email addresses
- Geographic locations
- Names
- Usernames
On the bright side, sensitive data such as passwords or billing information is not reported to have been leaked. Either way, Discord users will want to look out for phishing attempts or otherwise suspicious emails and direct messages on Discord moving forward.
Prime Day is here! We've found all the biggest and best deals from this year's event below.
- AMD Ryzenâ„¢ 9 9900X 12-Core - was $499 now $337
- CORSAIR 4000D PC Case - was $124.99 now $75.99
- Hisense 65" Class E6SR - was $549 now $377.99
- Apple 2026 MacBook Air - was $1,999 now $1,799
- Skytech Gaming PC Desktop (9850X3d) - was $3,699 now $3,199
- Apple Magic Mouse - was $79 now $59
- Samsung Galaxy Z Fold8 Ultra - was $2,099 now $1,699
- Amazon Fire HD 10 tablet - was $154 now $72
Prices correct as of October 6th, 2026.
It hasn’t been the greatest week for cybersecurity so far. Just yesterday, an ASOS hack led to customers being sent a threatening message, revealing that user data was compromised. ASOS later published a statement to confirm the breach, saying that “basic personal information” may have been accessed, but it believes more sensitive data is not impacted.