The breach came through a server the company had already migrated away from, still running an analytics tool
2026-10-09Security
Double Counter, an anti-abuse bot used across large Discord communities, was breached on 4 October through a publicly reachable Metabase instance on an old host from its previous setup. The attacker forged an admin session, reached a cloud key, and copied records on about 28 million accounts.