Twitch data breach confirmed, exposes source code and creator payouts

[EN]: Game streaming platform Twitch announced today it has suffered a massive data breach.

This comes after a user at 4chan posted a 125GB torrent link today. VideoGamesChronicle.com first reported the news. The site verified the availability of the 125GB torrent link shared by the unknown hacker.

Twitch is already aware of the breach. The VGC post also says “it’s believed that the data was obtained as recently as Monday.”

Today, Twitch made an announcement via Twitter: “We can confirm a breach has taken place. Our teams are working with urgency to understand the extent of this. We will update the community as soon as additional information is available. Thank you for bearing with us.”

According to the 4chan user, the motive was “to foster more disruption and competition in the online video streaming space.” The user also called Twitch a “disgusting toxic cesspool.”

Among the data included in the recently-revealed leak: info of payments made to the best streamers and many others. Earning for the best channels are in the hundreds of thousands monthly. 81 Twitch streamers received more than $1 million since August 2019.

Besides the creator payout reports, the leak also includes the following:

• All source code for Twitch, along with comment history.
• Mobile, desktop and console Twitch clients
• Proprietary SDKs and internal AWS services used
• A Steam competitor that Amazon is working on, called Vapor. A chat software called Vapeworld is reportedly in the works.
• “Every other property that Twitch owns” such as IGDB and CurseForge
• Internal company tools to improve security “by having staff pretend to be hackers”)

Users who have been browsing the info have said the leak includes encrypted passwords. Because of this, it is recommended for users of Twitch to enable two-factor authentication.

[Source]: VideoGamesChronicle.com: The entirety of Twitch has reportedly been leaked – [Archive].