VGC has reported that the entirety of Twitch has been leaked. This includes the company’s source code and user payout information. According to the report, the leaked Twitch data includes the entirety of Twitch’s source code with comment history “going back to its early beginnings”, creator payout reports from 2019, mobile, desktop and console Twitch clients, proprietary SDKs and internal AWS services used by Twitch, “every other property that Twitch owns” including IGDB and CurseForge, an unreleased Steam competitor, codenamed Vapor, from Amazon Game Studios, and Twitch internal ‘red teaming’ tools which is designed to improve security by having staff pretend to be hackers.
Vapor is supposed to integrate many of Twitch’s features into a bespoke game store. Alongside Vapor, the leak includes Unity code for a game called Vapeeworld, which appears to be chat software based on Vapor. The creator payout information reveals that 81 Twitch streamers including Shroud, Nickmercs, and DrLupo have been paid more than $1 million by Twitch from August 2019 to October 2021.
The gross payouts of the top 100 highest-paid Twitch streamers from August 2019 until October 2021: pic.twitter.com/3Lj9pb2aBl
— KnowSomething (@KnowS0mething) October 6, 2021
An anonymous hacker posted the 125GB torrent link to 4chan. The hacker said that the leak was “intended to foster more disruption in the online video streaming space because their community is a disgusting toxic cesspool.” The hacker stated that this is just the first part of the content due to be leaked. Following the initial report, Twitch has confirmed the news and believes that the data was obtained as recently as Monday. The torrent link was posted on Wednesday.
We can confirm a breach has taken place. Our teams are working with urgency to understand the extent of this. We will update the community as soon as additional information is available. Thank you for bearing with us.
— Twitch (@Twitch) October 6, 2021
Cyber reporter Joe Tidy said that if the leak is fully confirmed, then the Twitch hack is the biggest leak that he has ever seen. “Security experts tell me the files contains things such as internal server details that can be accessed by Twitch employees only,” Tidy said. “And if it is all confirmed, it will be the biggest leak I have ever seen – an entire company’s most valuable data cleaned out in one fell swoop.” Ampere Analysis Analyst Piers Harding-Rolls talked about how the leak could negatively impact streamers’ future earnings.
The Twitch document leak on payouts is pretty damaging for the streamers
Undermines their ability to negotiate on future contracts/deals with brands
— Piers Harding-Rolls (@PiersHR) October 6, 2021