Twitch stated that no user passwords and financial information were exposed in the large-scale data breach that occurred last week, and it was “convinced” that the system storing encrypted login credentials was not accessed.
“The exposed data mainly includes documents from the Twitch source code repository, as well as a subset of creator payment data,” Twitch Said“We have conducted a thorough review of the information contained in the exposed files and are convinced that it only affects a small number of users and has minimal impact on customers. We are in contact with those directly affected.”
It also confirmed that the incident was the result of a server configuration error “allowing unauthorized third parties to improperly access.” This problem has been fixed.
The wording of the statement, especially referring to the inspection of “information contained in the exposed files,” may be to provide Twitch with some leeway after more destructive information is exposed: the hacker behind the leak last week mentioned it as The “Part One” implies that more things will happen in the future, and Twitch may not be aware of its specific nature.
Nonetheless, considering the extent of the violation, this is as good as Twitch hopes, with a total of 125GB of data, including streaming payment information, the source code of the entire Twitch website, and the unreleased Steam competitor’s codenamed Vapor. information. Security experts were shocked by the scale of the hacking: Some people said the intrusion was “as serious as possible.”
Despite the relatively good news, the response to Twitch’s Twitter statement was not uniform. One user claimed to have “numerous” Two-factor authentication request The next day after being hacked, some passwords were revealed; another pointed out The payment information of 10,000 anchors was leaked, Although this may indeed be a “small part” of Twitch’s total user base, it is still a hell for many people. There are still concerns that data that is indeed leaked may lead to fraud.
I think the problem that should be solved is “…no access, and no 𝗳𝘂𝗹𝗹 𝗰𝗿𝗲𝗱𝗶𝘁 𝗰𝗮𝗿𝗱𝗻𝗿𝗱𝗻𝗻𝗺𝗻 the last number of major digital problems that may cause fraud in my credit card.October 15, 2021
Twitch finally stated that it had “taken steps to further protect” the platform, although it did not elaborate on any details in this regard, and apologized to users for violations.