Zero Radar
← feed
MediumData breachHIBP-DoubleCounterupdated 25 Oct 2026, 13:32 UTC

Discord protection service Double Counter leaked user emails and usernames

Hackers got into data held by Double Counter, a service that protects Discord servers, and published it online. Anyone who used the service may now have their email address and Discord username public, and a few paying customers also had th

Official source
SeverityMediumData breach
Being exploited?UnclearNo reports either way yet
What to doCheck exposureBe alert to phishing emails and Discord messages that reference Double Counter or your account, and avoid clicking unexpected links.
How sure is this?Official sourceBacked by an official source

How the attack works simplified

  1. 1Attacker exploits flawVulnerability in Metabase analytics tool
  2. 2Access gainedAttackers reached a subset of Double Counter data
  3. 3Data extractedEmails, Discord usernames, some subscriber details
  4. 4Data publishedCorpus released publicly, about 275k unique records
  5. ResultUsers' emails and usernames exposed publicly

What happened

A vulnerability in the Metabase analytics tool used by Double Counter let attackers access a subset of its data, which was later published as a corpus of about 275k unique emails and Discord usernames.

Why it is dangerous: Exposed emails and usernames can be used for phishing, spam or targeted scams, and the small group of paying subscribers also had names, countries and postcodes leaked.

Are you affected?

You are affected if you used Double Counter's Discord server protection service, especially if you were a paying subscriber whose purchase was processed via Stripe.

Package / productAffected versionsFixed in
doublecounter.ggsee advisoryno fix yet

What to do

  1. Be wary of unexpected emails or Discord messages referencing Double Counter, and do not click unknown links.
  2. Change your email password and enable two-factor authentication on the affected email account.
  3. If you were a paying subscriber, watch for suspicious messages referencing your purchase or payment.

Timeline

  1. 7 Oct 2026, 05:42 UTC
    Publicly disclosed
  2. 7 Oct 2026, 05:42 UTC
    Reported by Have I Been Pwned · Have I Been Pwned

Sources 1 report, oldest first

Official vendor, government CERT or advisory database

Technical details

ID
HIBP-DoubleCounter
Disclosed
7 Oct 2026, 05:42 UTC
On Zero Radar
before the radar started
Last change
25 Oct 2026, 13:32 UTC

The plain-language parts and the attack diagram were written by an AI model (anthropic/claude-haiku-5.5) from the sources above. Facts like versions, exploitation and dates come from the sources themselves. How Zero Radar works

Discord protection service Double Counter leaked user emails and usernames · Zero Radar