Anonymous hacker leaks Twitch's source code and other secret information
- A 125GB torrent download was made publicly available on 4chan
- It includes a lot of internal Twitch files, creator payouts, commit history, and even some unreleased services
- The hack appears to have been carried out to disrupt Twitch's position as a company
- No sensitive user data seems to have been leaked
Twitch has been hacked, granting access to now publicly available sensitive data and showing the full source code of the platform.
In a leak, published on 4chan, an unnamed poster has shared their distaste for the platform and released a torrent link to a 125GB file. It contains Git repository history, payouts made to the creators, an unreleased game distribution service from Amazon, Twitch's parent company, and more.
What information was leaked?
The hacker claims that the leak includes:
- Entirety of Twitch, with its Git commit history going all the way back to early beginnings
- Payouts for the top Twitch creators
- Every property that Twitch owns, including IGDB and CurseForge
- Mobile, desktop, and video game console Twitch clients
- Proprietary SDKs and internal AWS services used by Twitch
- Every other property owned by Amazon Game Studios
- Twitch internal security tools
Cybernews has gained access to some of the data released – multiple outside sources also confirm that this leak is legitimate.
Notably, the hack did not include any of the Twitch user information, such as login credentials or personal data. However, the leak also includes details of the payouts the platform made to thousands of its top creators. This appears to be an attack against Twitch, but not affecting any of its regular users.
However, due to the nature of the attack, we still heavily suggest all Twitch users change their current passwords and enable 2-factor authentication.
Why was this attack carried out?
The poster on 4chan claims that this leak has been done to "foster more disruption and competition in the online video streaming space," because Twitch is "a disgusting toxic cesspool."
Jeff Bezos paid $970 million for this, we're giving it away FOR FREEAnonymous 4chan poster
The message was finalized with the hashtag #DoBetterTwitch – possibly referring to the Twitter campaign earlier in the year, where the platform was called out for failing to control the abuse suffered by streamers on the platform.
The leak is labeled as "part one", implying that more leaks might be on the way.
Twitch's response to the leak
Twitch has confirmed the legitimacy of the leak. In a press release hours after the incident, the company has blamed the "error in a Twitch server configuration change that was subsequently accessed by a malicious third party".
Twitch also states that no login credentials or full payment data were accessed. and full credit card data were affected as well. However, it reset all stream keys, used by the platform's creators.
The company vows that it continues to investigate the matter, so more information is subject to release. We will update this post as more information becomes available.