Massive Twitch 4chan leak includes list of the top 10,000 streamer payouts
A major data leak at Amazon and Twitch has exposed a great deal of information, allegedly including Twitch's source code and its top creator payouts.
UPDATED (10/6/2021 @ 2:00 a.m. PT): Twitch has since confirmed on Twitter that a breach did indeed of data did indeed take place and has taken steps to attempt to sort out the matter, promising to share updates on the situation as soon as possible.
We can confirm a breach has taken place. Our teams are working with urgency to understand the extent of this. We will update the community as soon as additional information is available. Thank you for bearing with us.
— Twitch (@Twitch) October 6, 2021
Furthermore, recently, an anonymous source at Twitch shared with Shacknews that based on the nature, degree, and specifics of the leak, it's highly likely that the leak was internal.
It’s a rough morning for Twitch and Twitch users going into today. Apparently, overnight, hackers got into a lot of behind-the-curtain data on the Twitch platform and have posted it on 4chan. Quite a lot was claimed to have been taken in the leak. The hackers claiming responsibility claimed to have gotten at Twitch’s source code, data on its mobile, TV, and gaming clients, data of its owned subsidiaries, and even the payouts for its top streamers, which were openly shared.
This leak was reported and confirmed by various sources on October 6, 2021, including Video Games Chronicle. Reportedly, a torrent file of about 125GB of data was dropped on 4chan, which could be downloaded as of this morning to access a deluge of content relating to Twitch. Among that information was the 2019 payout reports for top streamers like Shroud and CohhCarnage. VGC was told by anonymous sources that the leaked data was indeed legitimate and Twitch has been internally aware of the leak. The data is alleged to have been taken as recently as Monday, October 4, 2021.
An (alleged) big leak from Twitch has been posted on 4chan. pic.twitter.com/6Sdz6GyJJV
— Irrational Chad (@IrrationalChad) October 6, 2021
According to posts on 4chan, the hack included breach and exposure of the following info:
- The entirety of Twitch’s source code with comment history “going back to its early beginnings”
- Creator payout reports from 2019
- Mobile, desktop and console Twitch clients
- Proprietary SDKs and internal AWS services used by Twitch
- “Every other property that Twitch owns” including IGDB and CurseForge
- An unreleased Steam competitor, codenamed Vapor, from Amazon Game Studios
- Twitch internal ‘red teaming’ tools (designed to improve security by having staff pretend to be hackers)
PSA: Not listed is the fact that apparently passwords may have also been part of the breach, as discovered by various Twitter users combing the data. As such, it is suggested that Amazon and Twitch users may want to change their passwords and enable 2-factor authentication as an extra means of security. There are guides on how to do so on Amazon and Twitch readily available.
Twitch has been making moves to try to stop hate raid bots recently, but there is still plenty of work to be done. The hackers claim their goal was to “foster more disruption and competition in the online video streaming space” because Twitch’s “community is a disgusting toxic cesspool.” It is unclear if these actions were in retaliation for the hate raid bots or in support of them. Nonetheless, a password change may be in order as Twitch and Amazon sort out their situation.
-
TJ Denzer posted a new article, Massive Twitch 4chan leak includes list of the top 10,000 streamer payouts
-
Twitch’s source code was leaked
ALSO CHANGE YOUR TWITCH PASSWORD supposedly those were leaked too
https://www.theverge.com/2021/10/6/22712250/twitch-hack-leak-data-streamer-revenue-steam-competitor
Has the revenue of a lot of top streamers from aug 2019 to oct 2021 which is crazy
-
Are those earnings numbers in dollars?
https://pastebin.com/LjmaPNam
If so, that's crazy that the top guy pulled in 9+ million since supposedly August 2019, which is what I'm hearing these numbers are for. I knew they were really well paid, I just didn't know the actual scale of it.-
-
-
-
-
-
-
-
-
Apparently yes, the interview and screenshots are here:
https://investmenttalk.substack.com/p/confessions-of-an-onlyfans-creator-760
The numbers are huge. She knows what she is doing, where to drive the traffic, investments, etc.
-
-
-
-
-
-
Cohh just said live on his channel that some of the "lists" are not accurate, but he still can't talk about how much he makes due to contractual obligations to Twitch. Also he said that he's "well off" and there's a reason he give all tips from PayPal to his mod team, etc. Very humble and as honest as he can be. Love this dude. But take the numbers leaked with a grain of salt. Some may be accurate, some not.
-
Here's his statement https://www.youtube.com/watch?v=1nW5co4aXP0
-
-
-
-
^^^ this. AWS Secrets Manager exists for this purpose, yes?
https://aws.amazon.com/secrets-manager/
-
-
-
-
-
-
-
-
-
-
Yeah, same. Frankly, I think they've lost the energy and passion for the work. They're all burned out. I had hoped the break between GB and NL would energize them but it didn't. I compare them to Waypoints who have really been energized by the launch of Waypoints+. They brought Natalie Watson back this week to replace Austin and I am pretty excited. Patrick and Cado have been streaming this Kirby golf game and it's been hilariously entertaining. Watching Vinny and Brad try and play Hitman this week, in contrast, was just boring and kinda sad.
-
I'll check out Waypoints, thanks. And yeah, I think ultimately what we're seeing is the result of the pandemic and how it's affected things.
I know I'm having a hard time focusing on work after a year+ of doing it at home, and I'm sure the same is true for them.
We all need a good vacation and to be able to get together and hang out. Hopefully that won't be too far off. -
Nextlander needs another personality that Vinny can bounce off of. A lot of the time Vinny falls flat because he can't throw stuff off Brad or Alex the same way he could Jeff, Ryan, or Dan. And yeah the not being able to feed off each other being in the same location hurts. You are seeing the same thing with Giant Bomb as well, since they are all remote the content suffers.
Also the Nextlander podcast really isn't doing it for me. It is very mechanical compared to what the Bombcast and Beastcast were. Although I am really enjoying the Fire Escape podcast with Mary, Mike, and Dan.
-
-
-
-
Yeah I dropped my sub when all the changes happened. None of their new shows appeal to me. That's really interesting about Born to Run. I watched some of that before my sub expired. I didn't like it because of how edited it was. Also makes me concerned that RV is going to make them drop content quickly if it doesn't get traction fast. Honestly, I am getting ready to drop Nextlander too. Those guys hearts just aren't in it.
-
-
-
-
-
"I mean, you got these people, these kids - they're really just kids! Eighteen; twenty years old. They play video games all day in the dark. Curse and use foul language - and people love it! I hear they can make a million dollars, just playing these games full of violence. Sex...you name it. When I was a kid, I worked at the local hardware store - I learned the difference between a pipe wrench and a monkey wrench. Valuable skills...I worked hard to earn a dollar, and I eventually bought that hardware store when the original owner lost it due to foreclosure 'cause of medical bills. Got it for a steal, too. Now I make my money the American way, by paying my employees minimum wage and not offering benefits. God-damned streamers...foul-mouthed lazy little shits."
-
-
-
-
-
-
-
Also pretty spectacular is that now it’s requiring me to enter in a code that it sent to my email but it wont actually send me an email and I’ve had this issue with Twitch for a long time as it constantly asked me to verify my email and when I would try I never would get it so I just had a banner on their site perpetually asking me to verify my email and now I can’t login because I can’t get that email for whatever reason and yes my email is correct.
Ugh.
-
-
-
-
-
-
-
-
-
-