An anonymous hacker attacked Amazon.com’s video game streaming platform Twitch and leaked a trove of data including Twitch’s source code and a spreadsheet detailing earnings for the platform’s top gamers.
Leaks on the social media platform 4chan, popular among conspiracy theorists and gamers, claim to include the entirety of the platform’s Twitch.tv streaming history and an Amazon Games product, still under development, designed to challenge Valve Corp.’s dominant Steam storefront.
The leak also offers a glimpse into the wealth generated in the gaming sub-industry. A document listing Twitch’s top earners shows gross earnings since 2019 reached $9.6 million for the platform’s top account, CriticalRole, a set of voice actors. The list points to 13 accounts that have made more than $108,000 a year and at least 80 that have collected more than $1 million since 2019.
Twitch confirmed the breach and said it would provide updates when it has more information.
The hacker said the purpose of the leak was to “foster more disruption and competition in the online video streaming space,” which he described as a “disgusting toxic cesspool,” according to the 4chan post reviewed by Bloomberg News. Users on the thread applauded the hack for exposing the pay of top earners, who were accused of attempting to keep their profits secret. The leak even spawned a site — TwitchEarnings.com — that promises to let users sift through the stolen payments data or search for many of the thousands of Twitch handles by name.
“Anytime source code gets leaked it’s not good and potentially disastrous,” said Ekram Ahmed, a spokesperson at Check Point Software Technologies, a cybersecurity firm. “It opens a gigantic door for evildoers to find cracks in the system, lace malware and potentially steal sensitive information. I strongly recommend all Twitch users to exercise caution in the near term ahead as cyberattacks are on the rise.”
Twitch earned its share of scrutiny in September over the platform’s mishandling of so-called hate raids. These occur when attackers or bots bombard an active livestream with messages in the victim’s chat box, typically homophobic, racist or sexist content. Users boycotted the platform on Sept. 1 for Twitch’s lack of response to these hate raids.
Seattle-based Amazon acquired Twitch in 2014. Since then, it has tried to combine it with other Prime services, such as Amazon Music and Prime Gaming, once called Twitch Prime.
Twitch, a livestreaming platform that attracts millions of viewers, is the leading broadcaster of video game play. The company offers streamers a share of advertising revenue and occasionally finds itself in bidding wars with rivals such as Google’s YouTube for the exclusive services of closely watched streamers.
“With 15 million daily users, Twitch holds significant amounts of data, much of which contains personal information about its customers,” said Danny Lopez, chief executive of Glasswall Solutions, a cybersecurity firm, in a statement. “It is essential that a proactive approach is taken to cybersecurity in order to protect such information. Once hackers have access to systems, there is little else that can be done.”
Bloomberg writer Augusta Saraiva contributed to this report.
