Twitch Warns Over Source Code Breach

Amazon-owned gaming community service Twitch has said that a massive data breach earlier this month mainly affected the company’s source code, with a “minimal” effect on end-users.

The firm first acknowledged the breach two weeks ago, soon after after a huge cache of data was published online.

Industry watchers have said the source code leak could create a security risk, as it allows anyone to search for vulnerabilities.

Twitch said its investigation has confirmed that the incident resulted from a server configuration change that allowed access by an unauthorised third party.

Internal data

“Our team took action to fix the configuration issue and secure our systems,” the company said in a statement.

It said user passwords “have not been exposed” and that it was “confident” that systems storing encrypted login credentials “were not accessed”.

It has previously said that it doesn’t store customers’ full credit card numbers.

“The exposed data primarily contained documents from Twitch’s source code repository, as well as a subset of creator payout data,” Twitch said.

It said it has undertaken a “thorough review” of the information published online and is “confident that it only affected a small fraction of users and the customer impact is minimal”.

Payout figures

The company said it’s directly contacting those affected and has taken further steps to secure the service.

The 135 GB trove of data,  initially published on message board 4chan by an anonymous user, included internal security tools, the code for an unreleased Amazon Game Studios gaming platform and a list of the highest-paid Twitch channels and how much they were paid, amongst other information.

The information reportedly showed that the highest-paid channel earned more than $10 million (£7.3m) in two years.

The person leaking the data said at the time that they intended to publish more.

Twitch earlier this month reset all users’ stream keys out of an “abundance of caution”.

The company acknowledged that users’ passwords were breached in a 2015 attack.

Amazon bought Twitch in 2014 for about $1bn.

Matthew Broersma

Matt Broersma is a long standing tech freelance, who has worked for Ziff-Davis, ZDnet and other leading publications

Recent Posts

TikTok US Sales ‘Hit $16bn’, ByteDance Nears Meta In World Revenues

TikTok reportedly brought in $16bn in US last year, while parent ByteDance made $120bn worldwide,…

18 hours ago

Bankman-Fried Deserves Up To 50 Years In Jail, Prosecutors Say

Ahead of sentencing prosecutors argue ex-FTX boss Sam Bankman Fried deserves up to 50 years…

19 hours ago

Senators Take Up TikTok Bill After Italy Fine Over Harmful Content

Senators consider bill restricting TikTok after rapid House approval, as Italy competition regulator fines company…

19 hours ago

AI Security Company Backtracks On UK Testing Claims

Security company Evolv backtracks on claims UK government tested its controversial AI security scanning systems

20 hours ago

Norfolk County Council Wins $490m Payout From Apple

Apple agrees to $490m settlement of class-action lawsuit led by Norfolk County Council for allegedly…

20 hours ago

McDonald’s International Outage Caused By Third Party

McDonald's says outage affecting thousands of locations across world caused by third-party tech provider carrying…

21 hours ago