Twitch Confirms Massive Data Breach Reportedly Including Source Code, User Payments
Twitch, the popular if frequently controversial Amazon-owned streaming service with 30 million daily visitors, confirmed reports on Wednesday that a breach had taken place after data, including possibly its entire source code and other sensitive company information, was leaked online.
Twitch said in a Tweet that they were “working with urgency to understand the extent” of what happened.
Data purporting to be Twitch’s source code and creator payout information was posted to 4chan by a user who said they want to “foster more disruption and competition in the online video streaming space,” describing the Twitch community as “a disgusting toxic cesspool,” according to Video Games Chronicle, which first reported the news.
The data may have been obtained as recently as Monday, and reportedly contains Twitch’s entire source code and comment history “going back to its early beginnings,” as well as details of the millions of dollars earned by popular streamers, VGC reported.
The leaker said Wednesday’s revelations were just the first part of what they would release, but didn’t give specifics on follow-up plans.
While the massive leak did not apparently include details such as logins, addresses or emails, users are nonetheless being encouraged to change their passwords and enable multi-factor authentication.
125 gigabytes. That’s the size of the torrent link that was posted on 4chan, according to VGC.
Just last week Twitch introduced new verification features in an effort to combat “hate raids” that have emerged recently targeting Black and LGBTQIA+ users. The company had faced criticism for failing to crack down on the practice, with some going so far as to boycott it last month.
“The entirety of Twitch has reportedly been leaked” (Video Games Chronicle)
“Twitch confirms major data breach after its source code and secrets leak out” (The Verge)
“A Devastating Twitch Hack Sends Streamers Reeling” (Wired)
“Twitch source code exposed in massive hack” (Axios)
“Twitch Introduces New Verification Tools To Combat ‘Hate Raids’” (Forbes)