A breach at the Double Counter bot exposes data on about 28 million Discord accounts

Double Counter, a verification bot for Discord, confirmed a cyberattack on October 4: the intruder stayed in its infrastructure for nearly six hours. Per 3DJuegos, Discord user IDs and usernames for around 28 million accounts were copied, along with IP addresses and approximate location for about 27 million and several hundred thousand email addresses.

The figures overlap across datasets, so they do not mean 28 million distinct people. Double Counter says Discord passwords and payment methods were not affected, and Discord says its systems were not compromised and that it is blocking the bot from new servers during the investigation.

The attacker also used the bot token to post links in about 50 large servers. Double Counter advises admins to delete the bot's messages sent that afternoon.