Twitch, the live video site popular with gamers, said on Wednesday that it suffered a data breach which security researchers said could have provided a full overview of the platform’s computer code, vulnerabilities security and payments to its content creators.
Twitch, which is owned by Amazon, confirmed it was breached hours after a user posted what the user claimed was a huge trove of Twitch data to the anonymous bulletin board website 4chan. The user said the 128 gigabyte file was only the first part of the leak.
The user said that the file contained, among other things, the history of Twitch’s source code; proprietary software development kits; an unprecedented competitor of Steam, an online game store; the programs Twitch used to test its own security holes; and a list of how much money each of the site’s streamers has earned since 2019.
“Find out how much your favorite streamer really earns! The user posted. “Jeff Bezos paid $ 970 million for it, we’re giving it away for FREE.”
Twitch did not respond to a request for comment on the details of the breach. “Our teams are urgently working to understand the extent of this,” the company wrote on Twitter. “We will update the community as more information becomes available. “
Ekram Ahmed, spokesperson for Check Point, a cybersecurity firm, said the company was “strongly suspected” that Twitch’s code had actually been leaked, which was “potentially disastrous.”
“This opens a huge door for criminals to find loopholes in the system, create malware and potentially steal sensitive information,” he said.
The incident plunged the Twitch streamer community into panic.
Kaitlyn Siragusa, known to her 4.4 million followers as Amouranth, said in a text message that it was “quite shocking that so much information can be breached.” Saqib Zahid, who broadcasts to his 2.8 million followers as Lirik, said in a direct message on Twitter that the incident was “frustrating”, but he was “not surprised”. Natalia Mogollon, known as Alinity online, said via a direct message on Twitter that her reaction was a “disappointment.”
And Félix Lengyel, one of the platform’s highest paid and most notable personalities, simply tweeted in all caps: “HEY @TWITCH EXPLAIN?
According to the earnings list, which could not be independently verified, some notable people have earned millions of dollars since 2019. Some streamers have confirmed their numbers to be correct, although others dispute them.
“All the data on me is 100% true in terms of payout value information,” tweeted Scott Hellyer, a streamer called tehMorag. “This is real and will impact people for years to come. “
Another streamer, Hasan Piker, expected people to get mad at the amount of money the list said they made.
The 4chan user included the hashtag #DoBetterTwitch, a variation of the #TwitchDoBetter hashtag that has been used in recent months by members of the Twitch community after the proliferation of so-called hate raids, in which users bombard streamers, especially women and people of color, with abusive and offensive messages.
Independent cybersecurity researchers said they were analyzing the data and combing the so-called dark web in order to understand what had happened.
“The Twitch leak is real. Includes a significant amount of personal data, ”tweeted Kevin Beaumont, cybersecurity researcher. “If the people involved are serious about dealing with toxicity in games, they might want to look at themselves in a mirror because that kind of leaking is toxic behavior.”