Major Security Breach Exposes Millions of Discord User Details Through Third-Party Service

Double Counter, a security service used by Discord, suffered a sophisticated multi-stage cyberattack that compromised approximately one million email addresses and partial information on tens of millions of Discord accounts including usernames, IDs, and IP addresses. The attackers also attempted fraudulent charges worth over $7,000, though payment data remained secure. Discord has advised users to avoid suspicious server invitations from the compromised period but states no account changes are necessary at this time.

Double Counter's infrastructure became a gateway for attackers to access sensitive information tied to Discord's user base. The breach exposed complete email addresses for approximately one million users, while a much larger pool of accounts—around 28 million—had usernames, account IDs, and IP addresses partially compromised. The attackers demonstrated sophistication by executing a coordinated multi-stage operation and subsequently attempting unauthorized financial transactions, though Discord's payment systems remained protected from unauthorized access.

The security firm has since remediated vulnerabilities and closed the attack vectors. Discord's response has been relatively cautious, avoiding mandatory password resets or account lockdowns while warning users to exercise heightened skepticism toward server invitations during the affected period. This measured approach reflects confidence that the compromised data poses limited immediate risk, though the exposed IP addresses and usernames could potentially be leveraged in future social engineering attempts.