Amazon-owned streaming giant Twitch has reportedly been hit with a hack and had its source code, internal security tools and data on how much it pays creators leaked online.
An anonymous hacker posted 125 GB of Twitch data posted on the online message board 4chan, Video Games Chronicle reported early Wednesday.
“We can confirm a breach has taken place. Our teams are working with urgency to understand the extent of this,” a Twitch spokesperson said. “We will update the community as soon as additional information is available. Thank you for bearing with us.”
The person who posted the leak on 4chan wrote that the purpose of the hack was to “foster more disruption and competition in the online video streaming space.”
“Jeff Bezos paid $970 million for this, we’re giving it away FOR FREE,” the apparent hacker gloated alongside a picture they posted of a baffled-looking Bezos.
Twitch — which was bought by Bezos in 2014 and had an estimated 41.5 million users in the US alone last year — did not immediately reply to a request for comment on the authenticity of the leak and has not yet sent any message about the leak to its users or creators.
But Kevin Beaumont, a cybersecurity expert and former Microsoft senior threat intelligence analyst, confirmed the leak’s authenticity.
“Twitch leak is real,” Beaumont wrote on Twitter. “Includes significant amount of personal data.”
Among that data was two years worth of information on creator payouts.
According to the leaked documents, Twitch’s highest-paid streamer — a creator called CriticalRole — raked in $9.6 million from August 2019 through October 2021. CriticalRole was followed by streamers xGcOW and summit1g, who took in $8.5 million and $5.8 million, respectively.
The reported leak also included the source code of Amazon’s mobile, desktop and console apps — as well as information on Twitch’s internal security tools.
Additionally, the leak allegedly included code for Vapor, an unreleased Amazon-run online game store that the company is reportedly developing to compete with dominant game store Steam.
The hacker who posted Wednesday’s twitch data teased additional leaks, writing that the initial files were “part one.”