Twitch video service was hacked, everything was stolen, including payouts
It looks like the entire Twitch.tv site has been hacked, so if you have an account there, you should probably at least change your password.
A Sinoc developer shared after an anonymous hacker posted a link to download a huge amount of data.
https://t.co/7vTDeRA9vt got leaked. Like, the entire website; Source code with comments for the website and various console/phone versions, refrences to an unreleased steam competitor, payouts, encrypted passwords that kinda thing.
- Sinoc (@Sinoc229) October 6, 2021
Might wana change your passwords.
Although passwords are encrypted, it is still a good idea to change them as a precaution. It's also a good idea to reset your Streaming Key and make sure that two-factor authentication is enabled.
Some streamers whose payouts have been made public have confirmed them to be correct. A source at the company, according to Video Games Chronicle, also confirmed the authenticity of the security breach.
Ironically, the leaked data is said to include internal penetration testing tools.
Total stolen:
- Twitch's entire source code with comment history "from the beginning of its existence."
- 2019 content creator payout reports
- Twitch mobile, desktop and console clients
- AWS proprietary SDK and internal services used by Twitch.
- "Any other property Twitch owns" including IGDB and CurseForge
- Unreleased Steam competitor codenamed Vapor by Amazon Game Studios
- Twitch's internal "red team" tools (designed to improve security when employees impersonate hackers)
Illustration: 9to5mac