Double Counter, a third-party service used to help protect Discord servers from raids and alt accounts, reports a data breach in which hackers exposed roughly 1 million email addresses. The incident also involves the exposure of Discord user IDs and IP addresses, with the number of affected IDs and IP records described as potentially in the millions.
Multiple outlets say Discord itself is not the direct target. Instead, attackers compromise Double Counter’s infrastructure through what one report characterizes as a deliberate, multi-stage attack, involving extensive probing before a vulnerability is closed. The outlets also indicate the breach results from unauthorized access to user-related data held by the protection service, rather than data collected directly by Discord. Double Counter says it has contained the issue, but users face the impact of the exposed contact and identifier information.
