Twitch is an amazon owned popular streaming platform with millions of users and streamers. On the 6th morning, a 4chan user uploaded a 235 GB torrent file containing payouts to streamers, unreleased steam competition from amazon gaming studio and other confidential information.Â
Twitch soon confirmed the breach and it is believed that the entirety of Twitch data was leaked, but the hacker mentioned part 1, hence we wait for what’s next to come. (watch out mark and FB)
We can confirm a breach has taken place. Our teams are working with urgency to understand the extent of this. We will update the community as soon as additional information is available. Thank you for bearing with us.
— Twitch (@Twitch) October 6, 2021
Hacker wrote “foster more disruption and competition in the online video streaming space” because “their community is a disgusting toxic cesspool”. As the reason for the hack
The leaked data reportedly includes:
- Twitch’s source code with commit history “going back to its early beginnings”
- Creator payout reports from 2019
- Mobile, desktop and console Twitch clients
- Proprietary SDKs and internal AWS services used by Twitch
- Twitch’s assets details including IGDB and CurseForge
- An unreleased Steam competitor, codenamed Vapor, from Amazon Game Studios
Some eagle-eyed users found encrypted passwords and gave the community a shout out to change their passwords and stream keys. That caused “Enable 2FA” to trend on Twitter.
"Enable 2FA" is trending due to the Twitch hack.
— Jameson Lopp (@lopp) October 6, 2021
To be clear, you should always enable (non-SMS) 2FA, but it won't protect you from hacks of a service's infrastructure. Not your database, not your data.
On top of that, creators' payout became a huge topic of discussion as many users shared the ranking list, sparking discussions about their earnings. To which many streamers ridiculed the logic and those are just a fraction compared to the mainstream entertainment industry standards.
It didn’t take long before Twitch got trolled for their own series of posts.Â
Karma hurts, but this became a meme itself pic.twitter.com/7ylg3x3Ezy
— Egolith (@Egolithz) October 7, 2021
Twitch has regularly found itself under fire from creators and users who feel the site doesn’t take enough action against toxic members of the Twitch community. Last month a group of Twitch streamers called on other channels and viewers to boycott the site for 24 hours as a response to hate raids. The twitch team replied to fix it but filtering was complicated.Â
Spooky season's here.
— Twitch (@Twitch) October 2, 2021
How are you celebrating, on and off stream? pic.twitter.com/0DlEQM6Pjk
This question was well answered by the hacker with this feat, It really spooked them big time. That’s another reason why decentralization and cryptography matters, most of the tech companies have a single point of failure ie their server, we saw with Whatsapp and Facebook a few days back, there are millions if not billions have their sensitive data which costs trillions of Dollars in market price.Â