Discord Verification Bot Double Counter Breached via Abandoned Server

Double Counter, a popular Discord verification service, suffered an infrastructure breach after an attacker spent nearly six hours moving through its systems on October 4. The intrusion began when the attacker exploited a vulnerability in a publicly exposed analytics tool on an abandoned OVH server, stealing admin credentials to access the main cloud environment. After opening a shell inside the bot container and extracting its Discord token, the attacker hijacked the bot to post malicious server invitations across 50 large communities. While the attacker exfiltrated usernames, IP addresses, and approximate locations, Double Counter states that passwords weren't held and a separate database of 58 million users remained secure. "Messages sent with the stolen token went straight to Discord without passing through our systems, so we identified the affected servers from the reports we received and from the bot’s own message history." — Double Counter staff