Twitch appears to have been hacked, revealing source code for the company’s streaming service, an unpublished Steam competitor from Amazon Game Studios, and details on creator compensation. An unknown member on the 4chan message board has published a 125GB torrent that they claim contains the entirety of Twitch and its commit history.
According to the leaker, the leak is intended to “foster more disruption and competition in the online video streaming space.” The leak is genuine and it includes code as recent as this week. The leak was initially reported by Video Games Chronicle earlier today.
Twitch has confirmed the data breach, and the company is “working with urgency to understand the extent of this.”
The leak includes the following:
- 3 years worth of details regarding creator payouts on Twitch.
- The entirety of twitch.tv, “with commit history going back to its early beginnings.”
- Source code for the mobile, desktop, and video game console Twitch clients.
- Code related to proprietary SDKs and internal AWS services used by Twitch.
- An unreleased Steam competitor from Amazon Game Studios.
- Data on other Twitch properties like IGDB and CurseForge.
- Twitch’s internal security tools.
The leak is labeled “part one,” implying that there may be more to come. According to Video Games Chronicle, Twitch is aware of the hack but has not yet notified its users.
The leak doesn’t appear to include Twitch users’ passwords or addresses, but that doesn’t imply this information wasn’t stolen as part of the attack. In fact, the leaker appears to have concentrated on providing Twitch’s own company tools and information, rather than code containing user accounts.
While Twitch has disclosed a data breach, it is unknown how much data was stolen. If you haven’t already, we recommend changing your Twitch password and setting two-factor authentication on your account.