Twitch said overnight that a recent breach happened when “an error in a Twitch server configuration change…was subsequently accessed by a malicious third party.”
As a result, “some data” has been exposed to the internet, so “out of an abundance of caution, we have reset all stream keys.” New stream keys are available via dashboard.twitch.tv/settings/stream. Some people may have to manually update their software with the new key in order to stream again, like OBS users who have not connected their Twitch account to OBS. Twitch Studio, Streamlabs, Xbox, PlayStation, and Twitch Mobile App users should not have to do a manual update, Twitch says.
“Our teams are working with urgency to investigate the incident,” Twitch says, but “we are still in the process of understanding the impact in detail.”
At this point, it does not appear that login credentials were exposed, nor was credit card information, since those numbers are not stored by Twitch.
Breached data, meanwhile, was posted on 4chan as a 125GB torrent link. Among the more eye-catching information it exposes is how much pro streamers get paid by Twitch.
