Twitch confirms a “malicious third party” was behind the hack

[ad_1]

Image: Twitch

Twitch has just released an update after yesterday’s major attack on the service, which led to the theft and then public publication of, among other things, the platform’s source code. According to their ongoing investigation, a malicious third party is responsible.

Described by executives as part of an extremely pogger leak, the data released yesterday included source code for Twitchs website and services, its client apps for various consoles, revenue data for its top streamers, its Amazon cloud-based services, various proprietary SDKs, other Twitch-owned services, tools used by its security operations center, and even an unreleased Amazon Game Studios Steam competitor.

The brief statement, released this evening, states with a huge euphemism that some data has been exposed to the internet, originating from an error in a Twitch server configuration change that was subsequently accessed by a malicious third party . Twitch also reiterates that it has no indication that login credentials were exposed and full credit card numbers were not exposed.

The full statement, posted on the Twitchs website under a title calling it a Twitch security incident, reads:

We have learned that some data has been exposed to the Internet due to an error in a Twitch server configuration change that was subsequently accessed by malicious third parties. Our teams are working urgently to investigate the incident.

As the investigation is ongoing, we are still in the process of understanding the impact in detail. We understand that this situation raises concerns and we want to address some of them here as our investigation continues.

At this time, we have no indication that the login credentials have been exposed. We are continuing to investigate.

Additionally, full credit card numbers are not stored by Twitch, so full credit card numbers have not been exposed.

[ad_2]