{"id":380173,"date":"2026-10-07T10:44:00","date_gmt":"2026-10-07T17:44:00","guid":{"rendered":"https:\/\/cms-articles.softonic.io\/en\/?p=380173"},"modified":"2026-10-07T10:44:40","modified_gmt":"2026-10-07T17:44:40","slug":"double-counter-breach-leaks-ip-data-from-28-million-discord-accounts","status":"publish","type":"post","link":"https:\/\/cms-articles.softonic.io\/en\/double-counter-breach-leaks-ip-data-from-28-million-discord-accounts\/","title":{"rendered":"Double Counter breach leaks IP data from 28 million Discord accounts"},"content":{"rendered":"

Double Counter<\/a>, a Discord<\/a> bot used in more than 600,000 Discord communities<\/strong>, was hit by a serious security breach in early October 2026 that exposed data linked to about 28 million Discord users, Tellter says. The company said an attacker got in during early October and stole roughly 12GB of data in about 25 minutes.<\/p>\n

\r\n
\r\n
\r\n
\r\n \"Discord\"\r\n <\/div>\r\n
\r\n Discord<\/span>\r\n Download<\/a>\r\n <\/div>\r\n
\r\n <\/path><\/path><\/text><\/svg>\r\n <\/div>\r\n <\/div>\r\n
\r\n <\/span>\r\n <\/div>\r\n
\r\n \r\n <\/div>\r\n <\/a>\r\n <\/div>\r\n<\/div>\n\n\n\n

Tellter says the stolen data includes Discord usernames, IP addresses, city-level location and ISP information, along with about 1 million full email addresses<\/strong>. Another 275,000 email-and-username pairs were later published. Because Double Counter is meant to spot alt accounts, this leak is more sensitive than a typical one, and Tellter says it’s treating all stored IP data as potentially potentially exposed.<\/p>\n\n

According to the company, the attacker got in through an old Tellter server that should’ve been shut down but was still online, running a vulnerable version of Metabase<\/a><\/strong>. Tellter said that server still contained live Double Counter credentials. The intruder also took the bot’s Discord password, intercepted the replacement password minutes later, found an Atis payment key, charged Tellter $7,316, and made smaller charges to two Atis customers that were later refunded.<\/p>\n\n

If you use Discord servers that depend on third-party bots, pay attention. Your risk of phishing, doxxing, harassment, and DDoS attacks while gaming is now higher<\/strong>. Tellter says anyone who shared an email address should watch for phishing attempts, and the company says it has reported the breach to France’s data authority and filed a criminal complaint.<\/p>\n

\r\n
\r\n
\r\n
\r\n \"NordVPN\"\r\n <\/div>\r\n
\r\n NordVPN<\/span>\r\n Download<\/a>\r\n <\/div>\r\n
\r\n <\/path><\/path><\/text><\/svg>\r\n <\/div>\r\n <\/div>\r\n
\r\n <\/span>\r\n <\/div>\r\n
\r\n \r\n <\/div>\r\n <\/a>\r\n <\/div>\r\n<\/div>\n\n","protected":false},"excerpt":{"rendered":"

Double Counter, a Discord bot used in more than 600,000 Discord communities, was hit by a serious security breach in early October 2026 that exposed data linked to about 28 million Discord users, Tellter says. The company said an attacker got in during early October and stole roughly 12GB of data in about 25 minutes. … Continue reading “Double Counter breach leaks IP data from 28 million Discord accounts”<\/span><\/a><\/p>\n","protected":false},"author":9351,"featured_media":380172,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","wpcf-pageviews":0},"categories":[1015],"tags":[],"usertag":[],"vertical":[],"content-category":[6823],"class_list":["post-380173","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news","content-category-games"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts\/380173","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/users\/9351"}],"replies":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/comments?post=380173"}],"version-history":[{"count":1,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts\/380173\/revisions"}],"predecessor-version":[{"id":380174,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts\/380173\/revisions\/380174"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/media\/380172"}],"wp:attachment":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/media?parent=380173"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/categories?post=380173"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/tags?post=380173"},{"taxonomy":"usertag","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/usertag?post=380173"},{"taxonomy":"vertical","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/vertical?post=380173"},{"taxonomy":"content-category","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/content-category?post=380173"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}