UPDATE — 16:30 Twitch has now confirmed the earlier breach via their official Twitter account. “Our teams are working with urgency to understand the extent of this. We will update the community as soon as additional information is available. Thank you for bearing with us.”
We can confirm a breach has taken place. Our teams are working with urgency to understand the extent of this. We will update the community as soon as additional information is available. Thank you for bearing with us.
— Twitch (@Twitch) October 6, 2021
Original Story Follows: It’s being reported that Twitch has become the victim of an anonymous hacker claiming to have obtained data including source code and user payout information.
As per Video Games Chronicle, a 125GB torrent leak was apparently uploaded to message board 4Chan on Wednesday. The leaker claimed their actions were to “foster more disruption and competition in the online video streaming space” as they believe “their community is a disgusting toxic cesspool.”
The data reportedly includes Twitch’s source code and comment history, security tools, creator payout reports from 2019, SDKs and AWS services used by Twitch as well as other properties owned by the company. Allegedly, there’s even data pertaining to an unreleased Steam competitor codenamed ‘Vapor’ from Amazon Game Studios. The payout data, meanwhile, is said to disclose the payouts of even top streamers such as DrLupo and Shroud.
An anonymous source at Twitch has apparently confirmed the legitimacy of the leaked data, and said that the company is aware of the breach. An official statement from Twitch, however, is yet to be made at the time of writing. The leaker has also threatened to release more content, VGC say, but it’s unknown what this additional data consists of. It’s almost certainly worth changing your password and activating 2FA on your account regardless, just to be safe. We’ll update should we hear official word from Twitch.
https://t.co/7vTDeRA9vt got leaked. Like, the entire website; Source code with comments for the website and various console/phone versions, refrences to an unreleased steam competitor, payouts, encrypted passwords that kinda thing.
Might wana change your passwords.
— Sinoc (@Sinoc229) October 6, 2021