Discord (Organization): news timeline & CVEs

Discord Security Bot Double Counter Hacked, Exposing Data of Millions of Users

Double Counter’s Discord bot breach exposed identifiers, IPs, and emails tied to tens of millions of accounts.

Tellter SAS said an attacker breached the Discord security bot Double Counter by exploiting a Metabase instance on a retired OVH server and using stolen cloud administrator credentials. The intruder was active for 5 hours 51 minutes, copied about 12 GB, and exposed Discord IDs and usernames for roughly 28 million accounts, IP records for about 27 million, 25 million user-agent hashes, and one million emails. Passwords and stored card data were not exposed, while a stolen Stripe key for separate product Atis enabled $7,316 in fraudulent charges. Tellter notified France’s CNIL, revoked credentials, and shut down the legacy server.

GBHackers07:31 UTC · 13h agoData breach in the wild 2 sources

Discord Users’ Data Exposed in Security Bot Double Counter Security Breach

A Double Counter Discord bot breach exposed tens of millions of IDs and IPs and about one million emails.

Double Counter, a Discord security bot, said an attacker breached its cloud on October 4, 2026, through an unused OVH server that still exposed Metabase. The attacker forged an administrator session, reused cloud credentials, stole the bot token, and posted invitations on about 50 large servers before copying roughly 12 GB of records. Double Counter treats about 28 million Discord IDs and usernames, 27 million IP and location records, user-agent hashes for about 25 million accounts, and roughly one million emails as exposed. Discord passwords and stored card numbers were not taken; a stolen Stripe key caused $7,316 in fraudulent charges. Discord itself was not confirmed compromised, and the provider says the attack is contained.

Cyber Security Newsupdated 07:31 UTC · 13h agofirst Oct 7, 17:40 UTC · 1d agoData breach in the wild 2 sources1

Hackers Steal Rockstar Source Code, 78.6 Million Records and Playable GTA VI Build

Lares links separate Rockstar intrusions to stolen source code, 78.6 million analytics records, and a leaked GTA VI build.

A Lares analysis describes separate Rockstar Games intrusions rather than one combined theft. In September 2022, Lapsus$ used legitimate credentials and repeated authentication prompts to steal about 90 development videos and proprietary source code, then searched Slack and Confluence for plaintext secrets. In April 2026, ShinyHunters took 78.6 million business analytics records after compromising Anodot and reusing long-lived OAuth tokens against Rockstar's Snowflake warehouse; player passwords, payments, source code, and GTA VI assets were not in that dataset. In August 2026, Cyberleek published footage from what researchers call an unfinished playable GTA VI build, while fake 113GB downloads have hidden a roughly 50KB payload.

Cyber Security NewsOct 7, 12:04 UTC · 1d agoData breach 2 sources

Discord

Timeline3 articles

Appears with

Discord Security Bot Double Counter Hacked, Exposing Data of Millions of Users

Discord Users’ Data Exposed in Security Bot Double Counter Security Breach

Hackers Steal Rockstar Source Code, 78.6 Million Records and Playable GTA VI Build