What data has been leaked by the Twitch hack?
Just a couple of hours ago, a large amount of information leaked by a hack to Twitch began to circulate on the Internet, this hack could be one of the largest that the streaming platform has suffered. It is known that a large amount of internal information on this platform has been leaked, including the users and passwords (hashed) of its streamers, all the information leaked is as follows:
- Web source code with comments
- Source code for console and smartphone versions
- References to competitors
- Payments made to streamers (before taxes, of course).
- Hashed passwords
Some of the internal information is a large amount of various proprietary SDKs and even internal AWS services that the platform uses. Internal red team (offensive) tools have also been leaked to check the security of Twitch, therefore, now everyone could have access to these tools for pentesting. Regarding payments to streamers, it seems that there is information from 2019 onwards, in fact, in this capture of a Twitter user you can see the income of well-known streamers such as Auronplay, Rubius and even Ibai among many others.
UPDATE: another anon re-ran the math, something was fuckey about that first one.
This seems slightly more realistic. pic.twitter.com/kNV1wVEMxF– Sinoc (@ Sinoc229) October 6, 2021
All this information is already circulating on 4Chan and Reddit with a Magnet link from the BitTorrent network, therefore, any of us could download all this information and find out what has been leaked and if our user or our account is affected. In fact, there are users who are already posting screenshots with the income that a large number of streamers are earning in different parts of the world.
Income of the largest streamers in Spain
All the income of the 10,000 largest streamers in the world have been filtered, in this list are very famous streamers in Spain such as Ibai, Auronplay or Rubius among many others. All the income that we will tell you below is accumulated income from September 2019 until now, but logically they are gross income, before taxes.
- Auronplay: $ 3 million.
- Ibai: 2.3 million dollars.
- Rubius: $ 1.80 million.
- TheGrefg: $ 1.3 million.
- illojuan: $ 720,000.
- elxokas: $ 550,000.
- Perxitaa: $ 440,000.
- IamCristinini: $ 390,000.
- alexby11: $ 250,000.
- aXoZer: $ 180,000.
- karchez: $ 120,000.
- aroyitt: $ 92,500.
And many other Spanish streamers are also on this list.
What can I do about this data breach?
Right now you can’t do anything if your data has been leaked, the only thing you can do is change Twitch password ASAP, enable two-step authentication to prevent a cybercriminal from taking control of your account, and monitor any type of access to your account from now on. Once you have secured your account, you can use the streaming service normally, paying special attention to the emails you receive from Twitch about the security of your account and additional security recommendations.
We are sure that due to all this leaked information, we will find additional details once everything that has been leaked has been studied in depth.