Security News > 2021 > October > Twitch Gets Gutted: All Source Code Leaked

An attacker claims to have ransacked Twitch for everything it's got, including all of its source code and user-payout information.

Twitch's announcement came days after Black and LGBTQ Twitch streamers, fed up with torrents of racist and transphobic hate, boycotted the service for 24 hours in the #ADayOffTwitch protest.

Multiple outlets, including VGC and The Verge, as well as one of VGC's anonymous company sources, have verified that the data thief got away with the real deal: All the files mentioned on 4chan are legitimate and are publicly available to download. That includes the source code for Twitch, which is owned by Amazon.

The entirety of Twitch's source code with comment history "Going back to its early beginnings".

"As the attacker indicated that they have not yet released all the information they have, anyone who has been a Twitch user should review all information they have given to Twitch, and see if there are any precautions they need to make so that further private information isn't leaked," Chappell advised.

Javvad Malik, security awareness advocate at KnowBe4, told Threatpost that beyond changing passwords, Twitch streamers should also keep an eye out for future phishing attempts that build on whatever data has been leaked or will be leaked.

News URL

https://threatpost.com/twitch-source-code-leaked/175359/