Double Counter Security Incident
Discord server protection and anti-alt verification service Double Counter disclosed a data security incident on October 4, 2026, stemming from an unpatched vulnerability in its Metabase analytics component.
Exposed Data Types
4- Email addresses
- Geographic locations
- Names
- Usernames
About This Breach
Attackers obtained unauthorized read access to internal analytic databases.
The published data contains 274,922 unique email addresses along with linked Discord usernames. A small secondary subset involving paying subscribers whose transactions were handled via Stripe also exposed customer names, countries, and postal codes.
Double Counter patched the vulnerable component and revoked compromised sessions. Server moderators and community members are encouraged to maintain multi-factor authentication across their primary Discord accounts.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
