Hackers steal millions of Discord IDs and email addresses in attack on Double Counter
The security service Double Counter has fallen victim to a deliberate, multi-stage attack, leading to a massive breach of Discord user data. While Discord itself was not directly targeted, the compromise of this third-party provider has exposed the personal information of millions of users.
According to estimates from Double Counter, hackers have stolen approximately 1 million email addresses. Additionally, the attackers partially copied databases containing Discord IDs, usernames, IP addresses, and location information for up to 28 million users. The security tracker Have I Been Pwned reports that 275,000 of the stolen emails and usernames have already been posted publicly.
Double Counter operates as a security bot for Discord servers, designed to detect unauthorized alt accounts and prevent malicious raids. To function, the service collects and stores personal information from users visiting the protected servers it monitors, making it a high-value target for cybercriminals.
The attackers spent nearly six hours probing the infrastructure before the vulnerability was closed. This incident marks the second major breach involving a third-party partner for Discord in recent memory; nearly a year ago, a breach of a customer service partner resulted in the theft of data including roughly 70,000 photos of users' government-issued IDs.
Флешка
