Twitch’s security teams are working overtime today following a leak that has exposed many of the streaming platform’s biggest secrets. The leak, which originated on 4chan and comprises 125 GB of information, is said to include the company’s source code, the amount that it pays contributors, and even a Steam competitor from Amazon Game Studios humorously dubbed “Vapor.” Twitch has confirmed that the leak is genuine.
“We can confirm a breach has taken place,” Twitch tweeted this morning. “Our teams are working with urgency to understand the extent of this. We will update the community as soon as additional information is available. Thank you for bearing with us.”
We can confirm a breach has taken place. Our teams are working with urgency to understand the extent of this. We will update the community as soon as additional information is available. Thank you for bearing with us.
— Twitch (@Twitch) October 6, 2021
“Their community is also a disgusting toxic cesspool, so to foster more disruption and competition in the online video streaming space, we have completely pwned them,” the 4chan post reportedly reads.
The hacker claims that the torrent file includes the following:
- Mobile, desktop, and console Twitch clients
- Various proprietary SDKs and internal AWS services used by Twitch
- Every other property that Twitch owns, including IGDB and CurseForge
- An unreleased Steam competitor from Amazon Game Studios
- Twitch SOC internal red teaming tools
- Creator payouts from 2019 until now
Twitch users are being urged to change their passwords.
https://t.co/7vTDeRA9vt got leaked. Like, the entire website; Source code with comments for the website and various console/phone versions, refrences to an unreleased steam competitor, payouts, encrypted passwords that kinda thing.
— Sinoc (@Sinoc229) October 6, 2021
Might wana change your passwords.