{
  "schemaVersion": 1,
  "incident": {
    "id": "breach-doublecounter-a65060a43de2c01edc90c12746e1ab64",
    "url": "https://cveboard.org/i/breach-doublecounter-a65060a43de2c01edc90c12746e1ab64",
    "urlPt": "https://cveboard.org/pt/i/breach-doublecounter-a65060a43de2c01edc90c12746e1ab64",
    "json": "https://cveboard.org/i/breach-doublecounter-a65060a43de2c01edc90c12746e1ab64.json",
    "kind": "breach",
    "live": false,
    "knownExploited": false,
    "severity": null,
    "title": "Double Counter data breach",
    "summary": "In October 2026, the Discord server protection service Double Counter suffered a data breach attributed to a vulnerability in the Metabase analytics tool. In its disclosure notice, Double Counter advised that attackers gained access to a subset of its data. A corpus of data was subsequently published publicly and contained 275k unique email addresses and Discord usernames. A small number of records belonging to paying subscribers whose purchases were processed via Stripe were also present and included names, countries and postcodes.",
    "titlePt": "Violação de dados do Double Counter",
    "summaryPt": "Em outubro de 2026, o serviço de proteção de servidores do Discord Double Counter sofreu uma violação de dados atribuída a uma vulnerabilidade na ferramenta de análise Metabase. Em seu aviso de divulgação, o Double Counter informou que os atacantes obtiveram acesso a um subconjunto de seus dados. Um corpus de dados foi posteriormente publicado publicamente e continha 275k endereços de e-mail únicos e nomes de usuário do Discord. Um pequeno número de registros pertencentes a assinantes pagantes cujas compras foram processadas via Stripe também estavam presentes e incluíam nomes, países e CEPs.",
    "cves": [],
    "ghsa": null,
    "cvss": null,
    "epss": null,
    "packages": [],
    "vendor": "Double Counter",
    "product": null,
    "kev": null,
    "breach": {
      "domain": "doublecounter.gg",
      "breachDate": "2026-10-04",
      "pwnCount": 274922,
      "dataClasses": [
        "Email addresses",
        "Geographic locations",
        "Names",
        "Usernames"
      ],
      "verified": true,
      "stealerLog": false,
      "malware": false
    },
    "retracted": false,
    "sources": [
      {
        "label": "Have I Been Pwned",
        "url": "https://haveibeenpwned.com/Breach/DoubleCounter"
      }
    ],
    "publishedAt": "2026-10-07T05:42:24.000Z",
    "updatedAt": "2026-10-07T05:42:24.000Z"
  },
  "live": false,
  "events": [
    {
      "id": "hibp:DoubleCounter:hibp_added:2026-10-07T05:42:24.000Z",
      "incidentId": "breach-doublecounter-a65060a43de2c01edc90c12746e1ab64",
      "type": "hibp_added",
      "at": "2026-10-07T05:42:24.000Z",
      "detail": {
        "pwnCount": 274922,
        "breachDate": "2026-10-04"
      }
    }
  ]
}