Twitch has confirmed that they’ve suffered a major data breach. The hack lead to the release of sensitive information including the app’s source code, an Amazon-owned Steam competitor, streamer payouts, and even users’ personal account info.
The company posted to Twitter, and was straightforward with their audience, “We can confirm a breach has taken place. Our teams are working with urgency to understand the extent of this. We will update the community as soon as additional information is available.” According to VGC, Twitch knew about the breach since Monday.
All of this comes just a week after Twitch implemented phone-verified chat, in an attempt to limit the number of hate raids that swamped the platform. This verification factor was made publicly available via a 125 GB torrent link that was posted to 4chan today. The data leak includes Twitch’s source bode in its entirety, proprietary software used by Twitch, as well as an unannounced competitor to Steam. It’s from Amazon Game Studios and is codenamed “Vapor,” combining many Twitch features with a digital gaming storefront.
Twitter users combed through the data and did find it include encrypted passwords, possibly leaving users’ profiles vulnerable. Twitch users should change thier passwords and enable two-factor authentication.