Teollimi

Double Counter (Tellter SAS, Discord bot) data breach

Was I affected?

Double Counter (Tellter SAS, Discord bot) confirmed a breach involving up to 28 million records (duplicates possible), exposing email addresses and names. You may be affected if you verified through the Double Counter bot to join a Discord server, used its Doogle lookup tool or dashboard, or paid for a Double Counter subscription.

Double Counter (Tellter SAS, Discord bot) breach facts
AnnouncedOct 5, 2026
When it happenedOctober 4, 2026
CountrySeveral countries
Records exposed (may include duplicates)28 million
Data exposedEmail addresses, Names and Other details
StatusConfirmed by the company or a regulator filing

What happened

Tellter SAS, the French company behind the Discord verification bot Double Counter, said an attacker spent nearly six hours inside its cloud infrastructure on October 4, 2026 and copied about 12 GB of data, and also took over the bot's Discord token to post spam invites. In its October 5 incident report it listed Discord user IDs and usernames for about 28 million accounts, IP addresses and rough location for about 27 million, and about 1 million email addresses (after duplicates were removed) as exposed. Part of the data was published online, and Have I Been Pwned counted 274,922 unique email addresses and usernames in that set, plus names, countries and postcodes for a small number of paying subscribers. Double Counter says no passwords or stored card numbers were exposed, and Discord says its own systems were not breached.

What should I do?

  1. Check haveibeenpwned.com to see whether your email address is in the published Double Counter data.
  2. Ignore Discord DMs and server invites that look like they came from Double Counter around October 4, and do not log in through links in them.
  3. Turn on two-factor authentication for your Discord account and review authorized apps in Discord settings.
  4. Server admins should review bot permissions and rotate any bot tokens they manage.
XRedditWhatsApp

Check the other services you use →

Sources