In case you haven't heard, Twitch has been hacked. The news broke early yesterday morning with reports of a massive data leak that included source code, creator payouts, account info, and more. A total of 125 GB of internal data was stolen, making this one of the biggest, if not THE biggest data leak of all time.
Twitch itself didn't acknowledge the breach until yesterday evening when it merely confirmed that a breach had taken place. Late last night, the streaming giant updated us with its internal investigation, blaming a "server configuration change" for providing access to "a malicious third party."
The good news is that Twitch has found "no indication that login credentials have been exposed." Even still, users logging into the site today will be met with a pop-up asking them to change their passwords. Y'know, just in case.
Twitch additionally mentioned that no credit card info was stolen because "full credit card numbers are not stored by Twitch." Stream keys for streamers, however, were likely part of the leak, with Twitch resetting all stream keys “out of an abundance of caution."
If you're using Twitch Studio, Streamlabs, Xbox, PlayStation, or the Twitch Mobile App, then you won't need to take any action (besides resetting your password, of course). If you're using OBS, you'll need to re-link your Twitch account after you reset your password and then re-enter the stream key from Twitch's dashboard.
The data breach has since been posted online and people have begun combing through the information. So far, the most interesting documents deal with Twitch's internal workings and Streamer payouts, which you can read about (without looking at the leak itself) in this Twitter thread here.
This breach will certainly do nothing for Twitch’s reputation, which has been tarnished in recent months by hate raids against marginalized and minority users. Twitch just recently provided additional tools for users to combat those hate raids, but now with Twitch’s internal data spread far and wide, one wonders if Twitch may have just handed hackers the means of getting around those tools.