The user posted a 125GB torrent link to 4chan on Wednesday, stating that the leak was intended to “foster more disruption and competition in the online video streaming space” because “their community is a disgusting toxic cesspool”.
VGC can verify that the files mentioned on 4chan are publicly available to download as described by the anonymous hacker.
One anonymous company source told VGC that the leaked data is legitimate, including the source code for the Amazon-owned streaming platform.
Internally, Twitch is aware of the breach, the source said, and it’s believed that the data was obtained as recently as Monday. We’ve requested comment from Twitch and will update this story when it replies.
Some Twitter users have started making their way through the 125GB of information that has leaked, with one claiming that the torrent also includes encrypted passwords, and recommending that users enable two-factor authentication to be safe.
Twitch source code leaked by anonymous hacker
According to the 4chan post, the leak reportedly includes the following:
- Entirety of twitch.tv, with commit history going back to its early beginnings
- Mobile, desktop and video game console Twitch clients
- Various proprietary SDKs and internal AWS services used by Twitch
- Every other property that Twitch owns including IGDB and CurseForge
- An unreleased Steam competitor from Amazon Game Studios
- Twitch SOC internal red teaming tools
- Creator payout reports dating back to 2019
The 4chan user also states this is part one of the leak, with presumably more data to share at a later date.
Twitch users are advised to change their passwords, set up two-factor authentication, and reset their stream key to protect their data.
Eurogamer has contacted Twitch for comment.
Twitch source code, creator revenue, passwords, more leaked in hack
One of the major items included in the leak is the creator payout reports from 2019 up to now, the user stating, “find out how much your favorite streamers is really making!” On top of this, it seems that Twitch is working on a Steam competitor from Amazon Game Studios, currently codenamed “Vapor.” Most dangerously, passwords have been included in the leak, so if you have a Twitch account, it’s recommended you change your password and have Two-Factor Authentication (2FA).
This leak comes hot off the heels of Twitch coming under fire for their lack of appropriate response to the continuous hate raids that have been happening on their platform. The hate raids have, in particular, targeted marginalized identities, including BICOP and LGBTQIA+ people, but it’s unclear whether this hack is meant to be a response to Twitch’s inaction or a general dislike of the service.
The original post did include the hashtag “DoBetterTwitch,” a tag used on Twitter as a way for creators on the platform to ask for better tools to battle the hate raids and a general call for improvements on things like creator revenue. The inclusion of the hashtag doesn’t necessarily mean that this was the intention of the hacker, as including passwords just puts more people at risk.
Careful Out There: Twitch Has Reportedly Been Hacked Wide Open
This attack on the Amazon-owned website is apparently to “foster more disruption and competition in the online video streaming space”, and is at least in part a reaction to the “disgusting, toxic” community. Twitch has been awash with hate raids lately, a practice that sends abusive bot accounts to another streamer. The site has been criticised for slow action against this sort of behaviour.
The hacker is allegedly planning to reveal more information in further leaks, so it seems this isn’t over yet. Whatever the case, cover yourselves with a quick password change, just to err on the side of caution.