An anonymous poster on 4Chan published 135 gigabytes of what appears to be internal data stolen from Twitch, including exactly how much money the platform’s biggest streamers make on Twitch.
On Wednesday, the poster published a link to a torrent of 135 GB, calling it “an extremely poggers leak” which allegedly includes source code for all Twitch clients for different operating systems, an unreleased Steam competitor, and internal tools that Twitch’s security team uses.
Videos by VICE
The poster wrote that “Jeff Bezos paid $970 million for this, we’re giving it away FOR FREE.”
“Their community is also a disgusting toxic cesspool, so to foster more disruption and competition in the online video streaming space, we have completely pwned them, and in part one, are releasing the source code from almost 6,000 internal Git repositories, including:
> Entirety of twitch.tv, with commit history going back to its early beginnings
> Mobile, desktop and video game console Twitch clients
> Various proprietary SDKs and internal AWS services used by Twitch
> Every other property that Twitch owns including IGDB and CurseForge
> An unreleased Steam competitor from Amazon Game Studios
> Twitch SOC internal red teaming tools (lol)
AND: Creator payout reports from 2019 until now. Find out how much your favorite streamer is really making!”
Twitch did not immediately respond to a request for comment.
Several streamers wrote on Twitter that their data inside the leak is real and accurate.
Motherboard compared revenue data for Waypoint’s Twitch channel to that within the leaked data and found it was accurate.
Do you work at Twitch? Do you have more information about this breach? Do you stream on Twitch and you have been affected by this leak? We’d love to hear from you. Using a non-work phone or computer, you can contact Lorenzo Franceschi-Bicchierai securely on Signal at +1 917 257 1382, OTR chat at lorenzofb@jabber.ccc.de, or email lorenzo@motherboard.tv.
If you are a Twitch user or creator, it may be a good time to change your password, in case whoever got access to the leaked data all got their hands on credentials.
Jason Koebler, Emanuel Maiberg, and Matthew Gault contributed reporting.
Subscribe to our new cybersecurity podcast, CYBER. Subscribe to our new Twitch channel.
