The Twitch hack is real, it’s massive, and security experts are baffled: “It’s as bad as it could possibly be.” The leak, which the hackers claim is only “part one,” includes the site’s source code, unannounced projects like Steam competitors, and streamers’ earnings.
Yesterday Twitch released what was a very holding statement, and has now expanded on what happened. To Twitch Blog:
“We have learned that an error in Twitch server configuration changes caused some data to be exposed to the Internet that was later accessed by a malicious third party. Our team is working urgently to investigate the incident.
“As the investigation continues, we are still in the process of understanding the implications in detail. We understand that this situation raises concerns, and we wish to address some of them here while our investigation continues.”
That is, Twitch is putting it in the human element: someone set up the company’s server incorrectly, and hackers were able to find and access it. Whether this is a human error or something nefarious is still unknown.
And secondly this statement makes clear that Twitch is still trying to understand just how bad it is.
Twitch doesn’t say specifically when the breach occurred, although the data involved in the leaks is up to three years old. Twitch’s statement clarifies that it believes that personal data such as login is not at risk, and emphasizes that “full credit card numbers are not stored by Twitch, so full credit card numbers are not at risk.” were not exposed.” Whether the former can be taken at face value remains to be seen.
Finally, Twitch has reset all stream keys “out of caution.” Streamers can get their new keys Here.
Twitch proxies will be in full crisis mode, because even if it worked out what happened, it doesn’t do anything about the fact that it happened — and that means now and in the future. The repercussions are potentially huge and elements of it far beyond the control of the Amazon-backed company.
Cyber-security company Acronis . “There’s going to be a lot more damage now for Twitch,” said Woost, a candidate of the US. told the bbc. “The breach is already hurting Twitch on all fronts. [This leak] This could include Twitch’s nearly complete digital footprint, making it one of the most serious data breaches of all time. Influencers will also not be happy with the release of payout reports for streaming clients.”
We’ll keep you updated as this story develops. In the meantime, change your password and set up two-factor authentication.