Logitech subsidiary, beloved by Twitch streamers, allegedly breached
15 million streamers at risk?
- Streamlabs, owned by Logitech, was allegedly breached by ShinyHunters, which threatened to leak stolen data after August 21st.
- The attackers have not shown samples, so researchers cannot verify what data, if any, was stolen.
- Streamlabs says its tools serve over 15 million creators, making any confirmed breach a major user risk.
- ShinyHunters has been linked to major breaches, raising concern about possible extortion and large-scale data exposure.
Logitech’s streaming software company Streamlabs has allegedly been breached by ShinyHunters, which is blackmailing the company.
Streaming software company Streamlabs, owned by Swiss tech giant Logitech, has been allegedly breached. The notorious cyber gang Shinyhunters has claimed responsibility for the attack and threatened to publish stolen data unless the company makes contact by August 21st.
The claim appeared on ShinyHunters’ leak site on the dark net, where the group posted what it described as a final warning to the company.
“Make the right decision, don't be the next headline,” they wrote, using the gang’s usual phrase to wrap up their message.
The post does not mention what systems were accessed or how the alleged intrusion occurred. Neither attacker has, at this point, provided any information that may have been stolen.
The post also does not include data samples, so it is impossible to check what attackers allegedly have in their hands.
If the group publishes samples, security researchers may be able to determine whether the material genuinely originated from Streamlabs and establish what types of information were allegedly taken.
Streamlabs software provides tools for live streaming, including overlays, alerts, donations, chat, and other features to help creators manage broadcasts across platforms.
The company was founded in 2014 under the name TwitchAlerts. It initially developed software around the open-source OBS ecosystem before expanding into a broader suite of streaming tools. Logitech acquired Streamlabs in 2019 in a deal reportedly worth approximately $89 million.
Streamlabs has previously reported over 15 million active creators and streamers using its suite of tools, with estimates suggesting that its software is used by roughly 70% of broadcasters on Twitch.
Given such an extensive user base, if proven legitimate, the data breach may have serious implications for users and the company.
Cybernews reached out to the company for a comment. We will update this article once a response is received.
Stay updated with our latest stories and follow us on social media
Be the first to discover new stories, ideas, and updates from our team.
Shinyhunters is known for high-profile attacks
The primarily English-speaking extortion group has been linked to numerous high-profile breaches over recent years and has built a reputation for stealing and monetizing large datasets.
In June, the gang hit Sysco, the world’s largest food distributor, and American fashion giant Ralph Lauren.
ShinyHunters is also believed to be behind the extortion campaign targeting Oracle's PeopleSoft enterprise software and accounting giant EY.
Previously this year, the gang hit Dutch telecommunications giant Odido and the European Commission. The gang is also behind attacks on Cisco Systems, GTA creators Rockstar Games, and US investment advisory firms Mercer Advisors and Beacon Pointe Advisors.
And it was partly responsible for last year’s Salesforce heist, which was claimed by a conglomerate of 3 gangs, dubbed Scattered LAPSUS$ Hunters. ShinyHunters is a member of this trio.
The Salesforce attacks affected more than 700 other companies, including Cloudflare, Zscaler, Palo Alto Networks, Google, Allianz Life, TransUnion, Farmers Insurance, Air France, and KLM.