Twitch says passwords were not exposed in last week's massive security breach

Twitch says passwords were non exposed in last week's massive security measures breach

(Icon acknowledgment: MARTIN Chest via Getty Images)

Twitch says user passwords and financial information were non exposed in the massive information breach that occurred last week, and that IT is "cocksure" that systems that store encrypted login credentials were not accessed.

"The exposed data primarily contained documents from Twitch's source code repository, as well as a subset of creator payout data," Pinch said. "We've undergone a thorough review of the data included in the files exposed and are confident that it only emotional a small fraction of users and the client impact is minimal. We are contacting those who have been impacted directly."

Information technology also confirmed that the incident was the result of a host configuration error "that allowed improper access by an unauthorized third base political party." The issue has since been fixed.

The wording of the instruction, specifically the reference to the examination of "information included in the files exposed," could be intended to give Twitch much squirm room falling the road should more damaging information come to light: The hacker behind live on week's leak referred to information technology every bit "part 1," implying that there's more than to come in the future, the specific nature of which Twinge English hawthorn not yet be aware of.

Still, it's about American Samoa good an outcome as Flip could hope for given the extent of the break, which totaled 125GB of data that included streamer payout entropy, the generator code for the entire Twitch site, and news of an unreleased Steam challenger codenamed Vaporization. Certificate experts were appalled by the scale leaf of the hack: One said the infract was "as bad as information technology could possibly be."

Despite the relatively good news, reaction to Twitch's statement on Chirrup was not uniformly positive. One user claimed there was a "myriad" of two-factor authentication requests the day afterward the hack, suggesting that some passwords were leaked; another pointed prohibited that 10,000 streamers had their payout selective information leaked, and piece that might indeed be a "half-size fraction" of Twitch's total user base, it's still a hell of a portion of people. And there's still extraordinary concern about the expected for fraud arising from the data that did get out.

I think what should be addressed, is the statement of '...were not accessed, nor were 𝗳𝘂𝗹𝗹 𝗰𝗿𝗲𝗱𝗶𝘁 𝗰𝗮𝗿𝗱 𝗻𝘂𝗺𝗯𝗲𝗿𝘀'My name, linked to lets say the last four numbers game of my credit batting order; can cause many epochal dupery issues.October 15, 2021

Twitch concluded by saying that it has "taken stairs to encourage secure" the platform, although it didn't tangle with any specifics thereon front, and apologized to its users for the rift.