DoubleCounter

Informazioni su questa violazione

In October 2026, DoubleCounter (doublecounter.gg), a Discord server-protection bot that detects alternate and ban-evading accounts, suffered a data breach after attackers exploited an outdated Metabase analytics installation on a retired server operated by its vendor, Tellter SAS. A corpus of data was subsequently published publicly and contained approximately 274,000 unique email addresses together with Discord usernames. A smaller subset of paying subscribers, whose purchases were processed through Stripe, also had their names, countries and postcodes exposed. The compromised data included email addresses, usernames, names and geographic locations; no passwords were exposed, as DoubleCounter never stored Discord passwords. The breach was verified by Have I Been Pwned, and the records were distributed via Telegram.