A stranger leaked the source code and business data of the video streaming platform Twitch through a torrent file posted on 4chan earlier today.
The stranger said he released the data in response to recent "hate raids”- coordinated bot attacks that posted abusive content on Twitch chats - and plagued platform members all summer.
The torrent contains 128 GB files. The torrent contains:
- The whole Twitch.tv from the beginning of the foundation of the platform
- Twitch clients for mobile, desktops and consoles
- Various proprietary SDKs and internal AWS services used by Twitch
- Any other property owned by Twitch, including IGDB and CurseForge
- An unreleased Steam competitor from Amazon Game Studios
Twitch SOC internal red teaming tools - and: Payment reports of the creators of Twitch from 2019 until today, so you can find out how much your favorite streamer earns!
Among the data are folders that contain information about Twitch authentication mechanisms, management tools, and data from Twitch's internal security team, such as white-boarded threat models that describe various parts of the Twitch backend infrastructure.
So far it has not been reported that any personal information has been leaked to any Twitch user, however the leak contained payment plans for the platform's top streamers, as mentioned above.
This data reports the monthly revenue for some of the platform's biggest streamers, some of which reach six figures.
The leak, however, is referred to as "part one", indicating that more data will be leaked at some point.
Although no user data was found in the leak, many security researchers urge users to change passwords and enable a multi-factor authentication solution on their account.
