Following a major leak affecting the company, gaming streaming site Twitch has assured its customers that their personal information and data are secure.
In a blog post, the firm explained what it knows about the “Twitch Security Incident,” which is reported to have exposed all of its internal source code and data.
Despite earlier fears, Twitch has assured customers that their personally identifiable information (PII) was not affected by the breach, implying names, addresses, and credit card information are all safe – yet there are still concerns that the hacker could have this information.
We’re researching how our readers use VPNs when streaming services like Netflix to enhance our content and provide better advice.
Users have claimed that they were asked to change their passwords for the service, but the business has not yet mandated a mass request to do so.
What will the second part be?
“We have learned that some data was exposed to the internet due to an error in a Twitch server configuration change that was subsequently accessed by a malicious third party,” the Twitch blog post read.
“Our teams are working with urgency to investigate the incident.”
“As the investigation is ongoing, we are still in the process of understanding the impact in detail. We understand that this situation raises concerns, and we want to address some of those here while our investigation continues.”
“At this time, we have no indication that login credentials have been exposed. We are continuing to investigate.”
Twitch emphasizes that no credit card numbers were exposed, as they are not kept by the service.
Twitch has confirmed that the leaker was due to an internal configuration error, implying that the intrusion was malevolent and external.
The leak, which was published on 4chan as a torrent measuring around 125GB in size, was labeled “part one,” suggesting that additional data may be forthcoming.
According to the hacker, Twitch was aware of the leak and that it contained a range of secret product roadmaps.
The torrent also includes the proprietary SDKs and internal AWS services utilized by the platform, as well as data from all other Twitch-owned properties including IGDB and CurseForge, and a lot more.