Twitch Data Breach Leaks Source Code, Passwords

A surprisingly large and comprehensive Twitch leak was posted to 4chan 10/06/21 at 2:34AM, a 125 GB torrent file containing the entirety of Twitch was posted on the 4chan image board.

The motivation for the leak itself according to the poster was "to foster disruption and competition in the online video streaming space" as well as to "completely pwn them". The poster has included in the torrent file the "the source code from 6000 separate Git repositories".

The leak includes, according to the poster:

Entirety of Twitch.tv, with source code comment history going back to its Justin.tv beginnings
Mobile, desktop and video game console Twitch clients
Various proprietary SDK's and internal AWS services used by Twitch
Every other property that Twitch owns, including TGDB and CurseForge
An unreleased Steam competitor for Amazon Game Studios
Twitch WOC internal red teaming tools
Creator payout reports from 2019 until now

The breach follows a safety feature announcement of phone-verified chats, to get hate raids, malicious users, and chat harassment off of the streaming platform.

Twitch Files Lawsuit Against Hate Raid Organizers

The 4chan moderation staff seemingly waited six hours before responding to the post, acting only to move it to another section of the website at 8:40 PM EST, where It's either been intentionally removed by the moderation staff or allowed to be pruned from the website via an automated system with archival sites tracking the most recent post within the thread to 12:23 PM EST.

@Twitch has confirmed via Twitter that as of 11:18 AM EST a breach has taken place and that they're working with urgency to understand the extent of the situation. Security experts suggest changing passwords, as well as setting up 2FA (Two-factor authentication) within the twitch app to help secure your Twitch account.

https://safety.twitch.tv/s/article/Two-Factor-Authentication?language=en_US