- Twitch Suffers Significant Data Breach Exposing Earnings of Top Gamers.
- 4chan user posts purported source code and user compensation data.
- Credit card numbers are not stored by Twitch, so full credit card numbers were not exposed.
Livestreaming site Twitch says an “error” caused the unprecedented leak that posted vast amounts of sensitive data online this week. The data appeared to include Twitch’s internal code and documents, as well as the payments made to thousands of top streamers. Twitch now says the breach was caused by a “server configuration change” that “exposed” some data. But it has not been confirmed if all the data posted online are genuine.
The leak includes the following:
- 3 years’ worth of details regarding creator payouts on Twitch.
- The entirety of twitch.tv, “with commit history going back to its early beginnings.”
- Source code for the mobile, desktop, and video game console Twitch clients.
- Code related to proprietary SDKs and internal AWS services used by Twitch.
- An unreleased Steam competitor from Amazon Game Studios.
- Data on other Twitch properties like IGDB and CurseForge.
- Twitch’s internal security tools.
In a tweet, Twitch confirmed the breach. The company will follow up with more details in a blog post later, saying that it was still working to understand the full impact of the incident. “We have learned that some data was exposed to the internet due to an error in a Twitch server configuration change that was subsequently accessed by a malicious third party,” the company wrote. “Our teams are working with urgency to investigate the incident.”
Twitch said there’s no indication that login credentials were exposed. The streaming platform also said, “full credit card numbers are not stored by Twitch, so full credit card numbers were not exposed.” While Twitch has confirmed a data breach, it’s still unclear exactly how much data has been stolen. We’d recommend changing your Twitch password and enabling two-factor authentication on your account if you haven’t done so already.
To turn on two-factor identification:
- Log on to Twitch, click your avatar and choose Settings
- Go to Security and Privacy, then scroll down to the Security setting
- Choose Edit Two-Factor Authentication to see if it’s already activated. If not, click on turn on option to enable it.
Thanks for Reading!!