Twitch says the “server configuration change” caused massive data leaks.
Twitch has released an update on the massive hack that reveals the source code, streamer payment statistics and other information. It said the data was leaked to the Internet “due to a bug in the Twitch server configuration that was later accessed by a malicious third party.” He added that his teams were working “hastily” to investigate the attack.
The Amazon-owned streaming site added that it had “no indication” that any login credentials, including passwords, had been leaked. “In addition, full credit card numbers are not secured via Twitch, so full credit card numbers are not revealed,” the company said.
Twitch also said that “as a precaution, we have reset all the keys to the stream” and provided a link to get a new one. Depending on the broadcast software you use, you may need to manually update your software to start a new series. “Users of Twitch Studio, Stream Labs, Xbox, PlayStation and Twitch Mobile App don’t need to take any action to make your new key work,” he wrote. “OBS users who have linked their Twitch account also do not need to take any action.”
However, if you haven’t linked your OBS account to Twitch, you’ll need to manually copy your stream from the Twitch Dashboard and paste it into OBS. “For others, please refer to the specific setup instructions for the software of your choice.”
Yesterday, the attackers claimed to have stolen “complete Twitch.tv” from the site, including mobile, desktop and console Twitch clients. It has access to proprietary SDKs and internal AWS services, red teaming tools and more. All of this information could make Twitch vulnerable to future attacks by allowing potential hackers to investigate vulnerabilities.
The leak also shows creators paying millions for streamers such as XQc, Nickmercs and Shroud. Many have confirmed that the figures are accurate.
The investigation is ongoing, Twitch said. “We are still in the process of understanding the impact in detail,” the company wrote.
Updated 10/7/2021 4:54 AM ET.: Twitch has reset all stream keys and advises users on how to update their software. This information is included in the article.
All products recommended by Engadget are selected by our editorial team, which is independent of our parent company. Some of our stories include affiliate links. If you buy something through one of these links, we can get affiliate commission.