Skip to content
Data Breach at Discord Bot Double Counter Exposes User Information

Data Breach at Discord Bot Double Counter Exposes User Information

First seen 7 Oct 2026, 19:36 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 7, 2026 at 21:34 UTC
  • •Double Counter experienced a breach exposing 12 GB of user data.
  • •The attack exploited a vulnerability in the Metabase analytics tool.
  • •Discord is actively preventing new installations of the bot during the investigation.

On October 4, 2026, Double Counter, a Discord security bot, suffered a data breach that exposed user data after an attacker exploited a vulnerability in the Metabase analytics tool. The attacker accessed the bot's cloud systems, copying 12 GB of database records and using a stolen bot token to post unwanted invitations across approximately 50 large Discord servers. Double Counter confirmed that no backdoor was left behind and restored services the same day. They reported $7,316 in fraudulent charges on a separate payment account but assured that customer funds remain safe. Discord has since halted new installations of the bot while investigating the incident. The breach highlights the risks associated with third-party integrations on platforms like Discord.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-04
Data breach at Double Counter confirmed
An attacker exploited a vulnerability in Metabase, accessing cloud systems and copying 12 GB of data.
doublecounter.gg
2026-10-04
Fraudulent activity reported
The attacker used a stolen payment key to commit $7,316 in financial fraud on a separate account.
doublecounter.gg
2026-10-07
Discord halts new installations of Double Counter
Discord confirmed no breach of its systems but is preventing new installs while investigating the incident.
X

More articles in this cluster (3)

Following this threat?

Track Double Counter in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (5)

1 / 3

Common questions

What data was exposed in the breach?
The breach exposed 12 GB of database records, including user data.
How did the attacker gain access?
The attacker exploited a vulnerability in the Metabase analytics tool used by Double Counter.
What actions are being taken to secure user data?
Discord has halted new installations of the bot and is working with Double Counter to investigate the incident.