TWITCH has confirmed it has been hacked – hours after an anonymous cybercriminal posted a huge amount of information online.
The leak seemingly includes payout reports from 2019, and users are worried that passwords have also been exposed.
1
The Amazon-owned game streaming site confirmed the attack on Tuesday.
“We can confirm a breach has taken place,” a Twitch spokesperson said.
“Our teams are working with urgency to understand the extent of this.
“We will update the community as soon as additional information is available. Thank you for bearing with us.”
According to VGC, the supposedly stolen information has been posted on 4chan.
That’s an anonymous bulletin board website where anyone can post information.
The anonymous post states: “Twitch is an American video live streaming service that focuses on video game live streaming, including broadcasts of esports competitions, operated by Twitch Interactive, a subsidiary of Amazon.com, Inc.
“Their community is also a disgusting toxic cesspool, so to foster more disruption and competition in the online video streaming space, we have completely pwned them, and in part one, are releasing the source code from almost 6,000 internal Git repositories.”
The hacker claims to have leaked the entirety of Twitch and posted a 125GB file of information.
An anonymous company source reportedly told VGC that the leaked information about the Amazon-owned streaming service is legitimate.
Twitch users are being advised to update their passwords for now until more information about the suspected hack is revealed.
The hacker has said they plan to reveal more information in future leaks.
The leak is said to include the entirety of Twitch’s source code with comment history “going back to its early beginnings”.
? Read our Twitch hack live blog for the latest updates
Creator earning reports, information about clients from the app, desktop and console versions of Twitch, “every other property that Twitch owns” and even information about a secret Amazon gaming shop are mentioned by the hacker.
Some Twitter users have been making their way through the 125GB of data available to the public.
One tweeted: “http://Twitch.tv got leaked. Like, the entire website; Source code with comments for the website and various console/phone versions, refrences to an unreleased steam competitor, payouts, encrypted passwords that kinda thing. Might wana change your passwords.”
Another said: “No way this is real. If true everything on twitch including source code and payouts are leaked. Change passwords. I’m hoping addresses aren’t part of this.”
Big content creators on the platform should also be concerned if the hack is legitimate.
The leaked documents suggest that streamers like Shroud, Nickmercs and DrLupo have all earned millions of dollars from the streaming service.
A list claiming to contain over 10,000 streamers’ earnings has been revealed and it contains information from August 2019 to October 2021.
Streamer Critical Role tops this list by reportedly earning $9.6million (£7million).
Jarno Niemelä, principal researcher at F-Secure, told us: “This leak is very serious for Twitch, but the question is what effects this will have for the regular Twitch user.
“As password hashes have leaked, all users should change their passwords, and use 2FA if they are not doing so already.
“But as the attacker indicated that they have not yet released all the information, anyone who has been a Twitch user should review all information they have given to Twitch and see if there are any precautions they need to make so that further private information isn’t leaked.
“And while it won’t help in this case as data has already leaked, users should always be cautious on what kind of information they provide to any social media platform.”
How to change your Twitch password
Changing your Twitch password is easy if you use the Password Reset Request tool.
You’ll just need to enter your username and email address and then click a link sent to your email.
You may still want to turn on two-factor authentication so that you also need your phone to access your account.
Go on Twitch and head to Settings.
Then click Security and Privacy and then the Security setting.
Then click Edit Two-Factor Authentication and make sure you’ve got your phone nearby to set up the service.
Best Phone and Gadget tips and hacks
Looking for tips and hacks for your phone? Want to find those secret features within social media apps? We have you covered…
Inside the controversial Twitch hot tub livestream craze where bikini-clad gamers make cash while bending sexual content rules
In other news, check out our iPhone 13 review and iPhone 13 Pro review.
Take a look at the new Lamborghini Huracan Evo that can clean your house and cook you dinner.
Find out about the wildly impressive Panasonic 65HZ1000 TV, which makes most tellies look rubbish.
Read our complete guide to Call of Duty Vanguard.
And Dell’s Alienware R10 Ryzen Edition is a gaming PC powerhouse that crushes both the new consoles.
We pay for your stories! Do you have a story for The Sun Online Tech & Science team? Email us at [email protected]
This post first appeared on Thesun.co.uk
