A stranger leaked the source code and business data of the video streaming platform Twitch through a torrent file posted on 4chan earlier today.
The stranger said he released the data in response to recent "hate raids” – coordinated bot attacks that published abusive content on talks of Twitch – and plagued the platform's members all summer.
The torrent contains archives 128 GB. The torrent contains:
- The whole Twitch.tv from the beginning of the foundation of the platform
- Twitch clients for mobile, desktops and consoles
- Various proprietary SDKs and internal AWS services used by Twitch
- Any other property owned by Twitch, including IGDB and CurseForge
- An unreleased Steam competitor from Amazon Game Studios
Twitch SOC internal red teaming tools - and: Payment reports of the creators of Twitch from 2019 until today, so you can find out how much your favorite streamer earns!
Among the data are folders containing information about Twitch's authentication mechanisms, management tools, and data from the internal team better safetyof Twitch, such as white-boarded threat models that describe various parts of Twitch's backend infrastructure.
So far there have been no reports of personal information being leaked for any Twitch user, however the leakage featured payment programs for the platform's top streamers, as we mentioned above.
This data reports the monthly revenue for some of the platform's biggest streamers, some of which reach six figures.
The leak, however, is referred to as "part one", indicating that more data will be leaked at some point.
Although no user data was found in the leak, many security researchers urge users to change passwords and enable a multi-factor authentication solution on their account.
