Huge Twitch hack – data breach leaks payment reports and more

Twitch has been hacked. This results in online leaking of its source code and users’ and streamers’ personal information. While an anonymous user has released a post with a 125GB torrent on the 4chan messaging board, they claim it contains the whole of Twitch and its commit history with an estimate of 6,000 internal repositories.

Here’s what the post says, “Their community is also a disgusting toxic cesspool, so to foster more disruption and competition in the online video streaming space, we have completely pawned them, and in part one, are releasing the source code from almost 6,000 internal Git repositories.”

While The Verge has checked the codes and confirmed the leak’s legitimacy, Video Game Chronicle was the first to report the details of the leak.

top 5 richest streamers based on the twitch leak;
1. Xqc (1.3 Trillion)
2. Dream ($7.9 Billion)
3. Obama (696 Million)
4. HasanAbi (House)
5. TommyInnit (100 Million)

— Dream (@Dream) October 6, 2021

The anonymous 4chan user said the Twitch data leak includes the following:

• Twitch’s internal security tools
• Details on creator payouts on Twitch (2019-present)
• Code related to internal AWS services and proprietary SDKs used by Twitch
• Twitch TV’s entirety, “with commit history going back to its early beginnings.”
• Source code for the mobile, video game console, desktop of Twitch clients.
• An unreleased Steam competitor from Amazon Game Studios Information on other Twitch properties like CurseForge and IGDB

HEY @Twitch EXPLAIN? pic.twitter.com/VfZ2pXi5Zv

— xQc (@xQc) October 6, 2021

Though the leaked post is named “part one,” it’s already a hint that there’s more to come. According to Video Games Chronicle reports, Twitch is aware of the data breach, and however, the company has not yet notified its user base.

Although the leak doesn’t contain very sensitive information such as passwords and addresses of users, it wasn’t a guarantee that the hacker hadn’t obtained them as part of his data breach. By the looks of it, the leaker only targets sharing company information and tools as the code that contains personal accounts wasn’t released.

Due to the data breach incident, the company is trying to hold on and contain the ongoing harassment and hate. Some Twitch streamers even took a day off in August to disapprove of the company’s lack of action. Twitch has posted a response to the #DoBetterTwitch movement using a hashtag that the anonymous poster has used in promoting the breach.