Twitch, the live video site popular with gamers, said Wednesday that it had endured a breach of data that security researchers believe may have provided comprehensive insight into the platform’s computer code, security vulnerabilities and payments to its content creators.
The confirmation from Twitch, which is owned by Amazon, that it had been violated came hours after a user posted what they claimed was a huge crowd of Twitch data on the anonymous bulletin board site 4chan. The user stated that the 128 gigabyte file was only the first part of the leak.
The user said the file contained, among other things, the history of Twitch’s source code; proprietary software development kits; an unreleased competitor to Steam, an online game store; programs that Twitch used to test its own security risks; and a list of the amount of money each of the site’s streamers have earned since 2019.
“Find Out How Much Your Favorite Streamer Really Earns!” the user posted. “Jeff Bezos paid $ 970 million for this, we’re giving it away for FREE.”
Twitch did not respond to a request for comment on the details of the violation. “Our teams are working with urgency to understand the extent of this,” the company wrote on Twitter. “We will update the community as soon as more information is available.”
Ekram Ahmed, a spokesman for Check Point, a cybersecurity firm, said it was the company’s “strong suspicion” that Twitch’s code had indeed been leaked, which was “potentially catastrophic.”
“It opens a giant door for criminals to find cracks in the system, lace up malware and potentially steal sensitive information,” he said.
The incident sent Twitch’s community of streamers into panic.
Kaitlyn Siragusa, known for her 4.4 million followers as Amouranth, said in a text message that it was “quite shocking that so much information could be broken.” Saqib Zahid, who streams to his 2.8 million followers as Lyric, said in a direct message on Twitter that the incident was “frustrating”, but he was “not surprised.” Natalia Mogollon, known as Alinity online, said via a Twitter message that her reaction was “disappointment.”
And Félix Lengyel, one of the top earners and most notable personalities on the platform, simply tweeted in capital letters: “HEY @TWITCH EXPLAIN?”
According to the earnings list, which could not be independently verified, some notable personalities had earned millions of dollars since 2019. Some streamers confirmed that their numbers were correct – though others disputed the numbers.
“All the data in there about me is 100% true in terms of payout value information,” tweeted Scott Hellyer, a streamer who walks past tehMorag. “This is real and will affect people for years to come.”
Another streamer, Hasan Piker, expected people to get upset over the amount the list said he had earned.
The 4chan user included the hashtag #DoBetterTwitch, a variation of the hashtag #TwitchDoBetter that has been used in recent months by members of the Twitch community following the spread of so-called hate raids, in which users bomb streamers, especially women and people of color, with offensive and offensive messages.
Independent cybersecurity researchers said they analyzed the data and combed the so-called dark web to find out what had happened.
“Wood leakage is real. Includes a significant amount of personal data, ”tweeted Kevin Beaumont, a cybersecurity researcher. “If the people involved really want to fight toxicity in games, they might want to look into a mirror, as that kind of leakage is toxic behavior.”