Double Counter Discord bot data breach

On October 4, 2026, the Discord moderation bot Double Counter, owned by the French company Tellter SAS, suffered a multi-stage data breach. Attackers exploited a vulnerability in a legacy server’s analytics tool to obtain cloud credentials, leading to the theft of approximately 12 gigabytes of data.

The breach compromised the Discord IDs and usernames of roughly 28 million accounts, along with IP addresses and coarse location data for 27 million users. Additionally, nearly one million email addresses were exposed, and some paying subscribers had names and postal codes leaked. The breach tracker ‘Have I Been Pwned’ confirmed that approximately 275,000 unique email addresses and usernames were released publicly.

During the six-hour incident, perpetrators used a stolen bot token to distribute malicious links across 50 large Discord servers and generated over $7,000 in fraudulent charges. While Discord confirmed the incident was a third-party breach rather than a compromise of its own systems, security experts warned that the leaked information increases the risk of targeted phishing attacks. Double Counter has since rotated secrets, moved databases to private networks, and notified France’s data protection authority, CNIL.