Over 125GB of Twitch data has been leaked online.
Click image for larger version  Name:	fetch?id=3513233&d=1631317470.jpg Views:	0 Size:	17.5 KB ID:	3513735

An anonymous hacker has just leaked a 125GB torrent of hacked and stolen Twitch data on Wednesday, October 6. This is allegedly just the first part of a larger data breach. According to a report from VGC, the leak was done in an attempt to "foster more disruption and competition in the online video streaming space" since Twitch's "community is a disgusting toxic cesspool."

According to reports, the leaked data appears to be legitimate. Twitch is said to be aware of the breach. The company says that they are "working with urgency to understand the extent of this." They go on to say that they will "update the community as soon as additional information is available."

The data is said to have been obtained as recently as Monday. It is said to include the following contents:

  • The entirety of Twitch’s source code with comment history “going back to its early beginnings”
  • Creator payout reports from 2019
  • Mobile, desktop and console Twitch clients
  • Proprietary SDKs and internal AWS services used by Twitch
  • “Every other property that Twitch owns” including IGDB and CurseForge
  • An unreleased Steam competitor, codenamed Vapor, from Amazon Game Studios
  • Twitch internal ‘red teaming’ tools (designed to improve security by having staff pretend to be hackers)
Some users have already begun to dive into the 125GB of data to see what has been included. Some have already claimed that the torrent includes encrypted passwords for users. Though encrypted, it is strongly recommended that you change your Twitch passwords. You should also change your passwords on other sites that may use the same password as on Twitch. Also, stop reusing passwords on sites.

You should also ensure that two-factor authentication is enabled on your account. To do so, go to your Twitch Security page under Settings, then click on "Enable Two-Factor Authentication" part way down the page. Set up your preferred 2FA method there. It is also on this Security page where you can change your password.


Vapor

Also included in in this torrent is some Unity code for a program called Vapeworld. This is apparently a chat application that is based on Amazon's unreleased and unannounced Steam competitor that they're calling, at least internally, Vapor. Get it? Steam. Vapor. Ha, good one, Amazon.

Vapor is, or was, in development as a direct competitor to Steam. It seems to integrate many of Twitch's features into a game store. That would presumably mean that it included access to streams and chat? I'm not sure what else that could mean.


Top Earners

Also included in the torrent is a list showing how much streamers have made through Twitch. The list, part of which can be seen below, does not include sources of revenue outside of Twitch. This list, theoretically, includes revenues made from subscribers and Bits. Third-party donations, merchandise, YouTube revenues, and sponsorships are not included in this.

The list does show that 81 Twitch streamers have been paid more than $1 million by Twitch just since August 2019. I've included an embedded tweet below as well as a text list of the top 25 earners on the platform.


  1. CriticalRole – $9.6 million
  2. xQcOW – $8.4 million
  3. summit1g – $5.8 million
  4. Tfue – $5.2 million
  5. NICKMERCS – $5 million
  6. ludwig – $3.2 million
  7. TimTheTatman – $3.2 million
  8. Altoar – $3 million
  9. auronplay – $3 million
  10. LIRIK – $2.9 million
  11. __unknown__ – $2.8 million
  12. Gaules – $2.8 million
  13. HasanAbi – $2.8 million
  14. Asmongold – $2.5 million
  15. loltyler1 – $2.4 million
  16. RanbooLive – $2.4 million
  17. MontanaBlack88 – $2.3 million
  18. ibai – $2.3 million
  19. Castro_1021 – $2.3 million
  20. MOONMOON – $2.2 million
  21. TheRealKnossi – $2.1 million
  22. moistcr1tikal – $2 million
  23. Mizkif – $2 million
  24. CohhCarnage – $2 million
  25. shroud – $2 million
In speaking with the BBC, a couple of Twitch streamers confirmed that the leaked earnings amounts were "100% correct" or "accurate."

The leaker seems to indicate that more might be coming from this Twitch hack as the torrent was listed as "part 1." Again, it's important that you change your passwords on Twitch and other sites that may use the same password. We'll have more on this should additional information be shared publicly.