Double Counter data breach exposes 274,922 accounts

# Double Counter data breach exposes 274,922 accounts

https://gcdradar.vercel.app/incidents/double-counter-data-breach-exposes-274-922-accounts · AIR-2026-1518 · closed 2026-10-21

- Lane: Breaches & attacks
- Severity: 4 (Confirmed real-world loss): Confirmed breach exposing personal data of over 270k accounts
- Fix status: No fix needed
- First reported: 2026-10-07 (happened 2026-10-04)
- AI role: No AI role
- Products: Double Counter

## Summary

Discord server protection service Double Counter was breached on October 4, 2026, after a vulnerability in Metabase was exploited, leading to the public release of about 275,000 email addresses and Discord usernames. Some records also included names, countries and postcodes of paying subscribers.

## What to do

Investigate the breach, notify affected users, and improve security controls

## Latest updates

- 2026-10-07: Double Counter data breach exposes 274,922 accounts (https://haveibeenpwned.com/Breach/DoubleCounter)

## Sources

- 2026-10-07 Have I Been Pwned: Double Counter data breach exposes 274,922 accounts https://haveibeenpwned.com/Breach/DoubleCounter

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.