28 Million Discord Accounts Breached

Summary

A breach of Double Counter, a Discord-community verification and fake-account protection service, reportedly exposed data associated with 28 million accounts. The attacker was in Double Counter’s systems for almost six hours on October 4.

Double Counter said it did not store Discord passwords and that none were exposed. It also said payment-card details were not held in the breached database. However, the attacker reportedly used system access to make fraudulent card charges: escalating transactions totaling $7,316 on a Double Counter card, plus two charges totaling $18 on customers’ cards.

The presenter noted that full details were not yet available and distinguished the incident from a direct breach of Discord itself. They also expressed concern about repeated security incidents involving Discord-related services.

The video discusses a separate, earlier incident involving around 70 million records and community support submissions containing sensitive documents. The presenter says the incident illustrated how age-verification processes and support requests can increase the sensitivity of exposed data, while clarifying that age verification itself was not necessarily the cause of that breach.

A Private Internet Access VPN promotion is included. There are no product reviews or tutorials.

Main Speaker and Sources

• Presenter: Cyber Waffle
• Statements attributed to: Double Counter
• Further details: A linked CyberNews article about the attack is referenced.