Discord security bot Double Counter says an attacker copied data tied to up to 28 million accounts. Here's what was exposed and what to do.