Hackers steal millions of Discord IDs and email address in "deliberate, multi-stage attack" on security service Double Counter
Gaming chat app Discord has suffered another user data breach, with a suspected 1 million email addresses stolen alongside (potentially many more) user IDs and IP addresses. While Discord was not targeted directly, third party security service Double Counter have reported a "deliberate, multi-stage attack" wherein hackers spent nearly six hours poking around their infrastructure before the…
Discord, the popular gaming chat app, has recently experienced a security breach that resulted in the theft of approximately 1 million email addresses, along with user IDs, IP addresses, and even location data for up to 28 million users. The breach was not targeted directly at Discord but rather exploited a vulnerability in a third-party security service called Double Counter.
Double Counter acts as a bouncer bot for Discord servers, designed to detect and block unauthorized accounts and prevent hostile raids by malicious users. Despite some debate over its effectiveness, Double Counter is capable of collecting and storing personal information of users who visit its protected servers. The hackers reportedly obtained around 1 million email addresses, along with Discord IDs, usernames, IP addresses, and location information.
Security breach tracking website Have I Been Pwned has confirmed that 275,000 of the stolen emails and usernames have since been made public. Double Counter's databases have been partially or entirely compromised, with hackers also reportedly obtaining 70,000 photos of users' government-issued IDs. This latest breach follows a similar incident that occurred almost a year ago, when cyber burglars compromised one of Discord's customer service partners.
The data breach comes amid a faltering rollout of an age verification system, which has reportedly funneled data into a company backed by tech entrepreneur Peter Thiel.
Written by urgent.news from Rock Paper Shotgun's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
