An anonymous hacker has just leaked a 125GB torrent of hacked and stolen Twitch data on Wednesday, October 6. This is allegedly just the first part of a larger data breach. According to a report from VGC, the leak was done in an attempt to "foster more disruption and competition in the online video streaming space" since Twitch's "community is a disgusting toxic cesspool."
According to reports, the leaked data appears to be legitimate. Twitch is said to be aware of the breach. The company says that they are "working with urgency to understand the extent of this." They go on to say that they will "update the community as soon as additional information is available."
The data is said to have been obtained as recently as Monday. It is said to include the following contents:
- The entirety of Twitch’s source code with comment history “going back to its early beginningsâ€
- Creator payout reports from 2019
- Mobile, desktop and console Twitch clients
- Proprietary SDKs and internal AWS services used by Twitch
- “Every other property that Twitch owns†including IGDB and CurseForge
- An unreleased Steam competitor, codenamed Vapor, from Amazon Game Studios
- Twitch internal ‘red teaming’ tools (designed to improve security by having staff pretend to be hackers)
You should also ensure that two-factor authentication is enabled on your account. To do so, go to your Twitch Security page under Settings, then click on "Enable Two-Factor Authentication" part way down the page. Set up your preferred 2FA method there. It is also on this Security page where you can change your password.
Vapor
Also included in in this torrent is some Unity code for a program called Vapeworld. This is apparently a chat application that is based on Amazon's unreleased and unannounced Steam competitor that they're calling, at least internally, Vapor. Get it? Steam. Vapor. Ha, good one, Amazon.
Vapor is, or was, in development as a direct competitor to Steam. It seems to integrate many of Twitch's features into a game store. That would presumably mean that it included access to streams and chat? I'm not sure what else that could mean.
Top Earners
Also included in the torrent is a list showing how much streamers have made through Twitch. The list, part of which can be seen below, does not include sources of revenue outside of Twitch. This list, theoretically, includes revenues made from subscribers and Bits. Third-party donations, merchandise, YouTube revenues, and sponsorships are not included in this.
The list does show that 81 Twitch streamers have been paid more than $1 million by Twitch just since August 2019. I've included an embedded tweet below as well as a text list of the top 25 earners on the platform.
- CriticalRole – $9.6 million
- xQcOW – $8.4 million
- summit1g – $5.8 million
- Tfue – $5.2 million
- NICKMERCS – $5 million
- ludwig – $3.2 million
- TimTheTatman – $3.2 million
- Altoar – $3 million
- auronplay – $3 million
- LIRIK – $2.9 million
- __unknown__ – $2.8 million
- Gaules – $2.8 million
- HasanAbi – $2.8 million
- Asmongold – $2.5 million
- loltyler1 – $2.4 million
- RanbooLive – $2.4 million
- MontanaBlack88 – $2.3 million
- ibai – $2.3 million
- Castro_1021 – $2.3 million
- MOONMOON – $2.2 million
- TheRealKnossi – $2.1 million
- moistcr1tikal – $2 million
- Mizkif – $2 million
- CohhCarnage – $2 million
- shroud – $2 million
The leaker seems to indicate that more might be coming from this Twitch hack as the torrent was listed as "part 1." Again, it's important that you change your passwords on Twitch and other sites that may use the same password. We'll have more on this should additional information be shared publicly.
