Massive Twitch leak includes source code, user info, and financial data for top streamers
On October 6th, 2021, a massive torrent of 125 GB was posted. This torrent contained Twitch's entirety and its commit history alongside confidential streamer data including revenue.
Also included in this leak is the source code with comments for the website itself and its apps for consoles, set top boxes, and mobile phones, references to Vapor, an unreleased Steam competitor, payouts and revenue for its streamers, encrypted passwords of its users, and more.
As of this story, Twitch has acknowledged this leak with the following statement via Twitter:
"We can confirm a breach has taken place. Our teams are working with urgency to understand the extent of this. We will update the community as soon as additional information is available. Thank you for bearing with us."
It also reset the stream keys of every single user "out of an abundance of caution." That said, the company confirmed that credit card numbers are not stored on Twitch and were thusly not leaked, and that there is "no indication that login credentials have been exposed."
As of the publication of this story on October 15th, 2021, Twitch has not elaborated further beyond an official blog post and a statement that they will "continue to investigate."
Further coverage: Twitch Blog The Verge VGC Vice