These days, corporate hacks seem like a near-daily occurrence, with only the biggest and most damaging ones making headlines (whether it's a ransomware attack or the good ol' fashioned exploit) or attracting more than cursory attention from the press. But Wednesday's hack of Twitch, the streaming service owned by Amazon, has come with a hilarious twist.
HUGE Twitch hack, entire user base and source code to Twitch leaked. Change your passwords and any associating passwords, enable 2fa, change your stream keys. pic.twitter.com/JcRSxO8FJi— Raeal The Protogen (@RaealTheProto) October 6, 2021
The hackers didn't just break in, they stole a treasure trove of valuable source code, internal admin tools and files associated with the Vapor game store - ie it was a hack planned and executed not simply to profit, but to hurt Twitch and Amazon. Data on payments to popular streamers from 2019 and 2021 was also stolen and leaked so people could see how much they were paid.
It appears the leakers have taken precautions to avoid exposing personal data that could be damaging for Twitch users.
more on the Twitch leak / hack. It appears the leaker has taken some time to ensure personal account information is not in this leak, and has focused on tools, SDKs, and code that affects Twitch itself. A source familiar with Twitch's tools confirms https://t.co/wgI7wOYYxY— Tom Warren (@tomwarren) October 6, 2021
In a message posted to 4Chan, the purported attackers denounced Twitch and its community as a "disgusting toxic cesspool" and so "we have completely owned them...Jeff Bezos paid $970MM for this, we're giving it away for free #dobettertwitch."
Here’s the 4chan post from the apparent Twitch hacker, calling Twitch’s community a “disgusting toxic cesspool,” and releasing a large amount of data along with what appears to be pic mocking Jeff Bezos. Twitch, owned by Amazon, confirmed the data breach a short time ago. pic.twitter.com/E9PV7g76wn— Eamon Javers (@EamonJavers) October 6, 2021
Twitch only just confirmed the attack minutes ago via Tweet: "We can confirm a breach has taken place. Our teams are working with urgency to understand the extent of this. We will update the community as soon as additional information is available."
We can confirm a breach has taken place. Our teams are working with urgency to understand the extent of this. We will update the community as soon as additional information is available. Thank you for bearing with us.— Twitch (@Twitch) October 6, 2021
Could this be the start of a new wave of anti-corporate "hacktivism"? Investors better hope not since the market already has enough to worry about.