Earlier today, we reported on a massive data breach over at Twitch. The company’s source code, secret projects and even sensitive information like partner earnings were all obtained and leaked online. Now, Twitch has responded, confirming the leak.
In a statement posted this afternoon, Twitch acknowledged the leak, saying: “We can confirm a breach has taken place. Our teams are working with urgency to understand the extent of this”.
Twitch added that it will “update the community as soon as additional information is available”, avoiding confirming which parts of the leaked data are legitimate and also failing to address concern around user data. Since Twitch didn’t say this, we will – if you use Twitch, be sure to activate 2FA to protect your account just in case. If you’re a streamer on Twitch, refresh your stream key.
So far, we have verified that the leak contains Twitch partner income information, the source code for Twitch, source code and files related to ‘Project Vapour’, which is set to be Amazon’s competitor to Steam, and other SDKs and proprietary tools.
KitGuru Says: This leak is going to have a huge impact on Twitch and will likely lead to other issues, including those of the legal variety. Hopefully soon Twitch will actually address user security concerns. While user data may not have been part of the public leak this morning, it could still have been accessed and taken.