Twitch streaming website has been attacked by anonymous hackers, and sensitive data including the site’s source code and details of creators payouts were leaked online as well as the information of the company’s mobile, desktop and console clients. The hackers have leaked some data which they called “Part One”.
Twitch is an American interactive video live streaming service that stresses video game live streaming. It has users from all over the world and was estimated at 8.07 million active streamers in the last month.
The “Part One” reference predicts that there would be more information that would be leaked in the upcoming installments.
On a 4chan messaging platform, the hacker has released a 125GB torrent of Twitch data and also The main purpose of this seems to make a drama through competition and disruption in the online video streamings. The leaked data includes:-
- The entirety of twitch.tv, with comment history going back to its early beginning
- Mobile, desktop, and video game console Twitch clients
- Various proprietary SDKs and internal AWS services used by Twitch
- Every other property that Twitch owns including IGDB and CurseForge
- An unreleased Steam competitor from Amazon Game Studios
- Twitch SOC internal red teaming tools.
However, In a tweet, cyber security researcher Beaumont confirms the leak:-
“The Twitch leak is real. Includes a significant amount of personal data. Feel bad for the InfoSec team, the attacker leaked lots of their data too including their threat models (which they probably want to update to include 4chan).”
Attackers have also stolen Twitch’s desktop, mobile, and console clients, they got accessed to the internal AWS, proprietary SDKs services Twitch uses. The steam competitor who hasn’t been released yet from the Amazon Game Studios has been hacked with the properties such as CurseGorge and IGDB, and Twitch SOC internal red-teaming tools.
“Jeff Besos paid $970 million for this, we’re giving it away FOR FREE. #DoBetterTwitch,” the hacker added.
However, From 2019 to 2021, all the creator payouts are also leaked. It includes top streamers i.e TimTheTatMan, Nickmercs, and xQc.
Till now Twitch users’ passwords or address-related data have not been leaked yet, but it might be in the future as “Part Two”.
Passwords may have been compromised as part of the leak, it is advised to change passwords as soon as possible. and enable 2-factor authentication on your account.