Streaming site Twitch has suffered a major data breach, the Amazon-owned company confirmed late on Wednesday.
Documents including Twitch streamers’ earnings, source code for the video streaming site and details of an unreleased Amazon competitor to gaming storefront Steam, codenamed “Vapor,” were posted online.
The leak was posted as a 126GB torrent to a forum on 4chan by a user who claimed it would “foster more disruption and competition in the online video streaming space”.
If accurate, the documents show that some of Twitch’s top streamers have made millions in revenue from the company in the last two years.
In a blog post published on Wednesday, Twitch said that data had been “exposed to the internet” as the result of a server configuration error, and was “subsequently accessed by a malicious third party”.
“Our teams are working with urgency to investigate the incident,” the company said.
The company later said it had reset users’ stream keys – the unique codes used to broadcast on the site – out of “an abundance of caution”.
Streamer earnings leaked
Some Twitch streamers whose earnings were exposed in the leak have confirmed that the details were accurate.
Fortnite streamer BBG Calc told the BBC that “the earnings list got my figure 100 per cent correct”.
According to versions of the list posted online, Dungeons and Dragons show Critical Role is Twitch’s top earner, with Canadian Overwatch player xQcOW and US political commentator Hasan Piker also ranking highly.
In its update, Twitch did not confirm the details of what had been leaked, saying “we are still in the process of understanding the impact in detail”.
However, the company did say that it did not believe users’ login credentials had been exposed.
Twitch also said that users’ payment details would not have been leaked as the company does not store full payment card numbers.
Source: Euro News
