Twitch Leak: Company Issues Statement After Source Code and Creator Payouts Exposed

Twitch has issued a new statement about their internal investigation into a recent hack, which saw the livestreaming platform's source code leak online.

On October 5, a 128GB torrent link was uploaded to the 4Chan website. For those who do not know, this is a messaging board where users can post anonymously without having to register for an account.

Among other things, the leak was purported to include Twitch's source code, a full history of its comments, and information about the Vapor marketplace. The latter was a proposed digital storefront - conceived as a rival for Steam - that would fully integrate with Twitch upon launch.

In addition to this, the torrent link also contained exhaustive creator payout reports that date all the way back to 2019. These records indicate how much revenue Twitch streamers have generated over the past three years, with personalities like xQc earning $8,454,427.17 between August 2019 and October 2021.

The anonymous 4Chan poster wrote that the leak was intended to "foster more disruption and competition in the online video streaming space," adding that the Twitch community is a "disgusting toxic cesspool." On that note, the 4Chan leak included the hashtag #DoBetterTwitch, which is similar to a phrase used by marginalized streamers who boycotted Twitch earlier this year.

In response, Twitch publicly verified that this hack was indeed genuine and that it contained real data on streamer earnings and comments. The Amazon subsidary thanked the community for its patience and confirmed that it would be releasing more information shortly.

We can confirm a breach has taken place. Our teams are working with urgency to understand the extent of this. We will update the community as soon as additional information is available. Thank you for bearing with us.

— Twitch (@Twitch) October 6, 2021

Twitch Issues a New Statement on the Leaks

The promised update arrived at 1:33 a.m. EST this morning, when Twitch revealed more about their ongoing investigation into the leak.

This follow-up bulletin is a little light on details but does provide some reassurances that ought to put users' minds at ease. Specifically, it confirms that no log-in details were exposed by the 4Chan hack, nor were any full credit card numbers revealed (as these records are not stored by Twitch in the first place).

Attributing the leak to a "malicious third party," the statement explains that Twitch is still getting to the bottom of how the incident happened and is currently assessing its impact.

The full update is as follows:

"We have learned that some data was exposed to the internet due to an error in a Twitch server configuration change that was subsequently accessed by a malicious third party. Our teams are working with urgency to investigate the incident.

As the investigation is ongoing, we are still in the process of understanding the impact in detail. We understand that this situation raises concerns, and we want to address some of those here while our investigation continues.

At this time, we have no indication that login credentials have been exposed. We are continuing to investigate.

Additionally, full credit card numbers are not stored by Twitch, so full credit card numbers were not exposed."

How To Change Your Twitch Password

While the update will no doubt come as a relief to Twitch users, it might still be worth changing your password anyway, just for extra peace of mind.

To do this, log into your account and then click on your profile icon in the top right corner of the screen. From there, you will need to click on the "Settings" button and navigate to the "Security and Privacy" tab.

Next, scroll down the page until you reach the "Security" section, where there is a link to change your password. Below this, there is also a purple box you can click on to set up two-factor authentication, if you want to add an additional layer of protection for your account.

Twitch Logo
The Twitch logo is seen on display during the 'Paris Games Week' in 2017. Chesnot/Getty Images