Enterprotect

View Original

Twitch Suffers Massive Source Code Data Breach

Exploit: Data Breach, Misconfiguration
Company: Twitch
Industry: Technology, Streaming Platform
Source: https://www.reuters.com/technology/amazon-owned-twitch-says-source-code-exposed-last-weeks-data-breach-2021-10-15/

125GB of data containing the source code for an expansion to streaming and gaming platform Twitch has been posted by an anonymous user to a 4chan messaging board. Twitch was preparing to release the upcoming expansion to its streaming services before hackers leaked the torrent which also included other data detailing the terms and amounts of content creator payouts.

The poster of the data leak is also claiming the stream includes the entirety of Twitch and its comment history including twitch.tv, source code for the mobile, desktop and video game console Twitch clients, code related to proprietary SDKs and internal AWS services used by Twitch, information pertaining to the platform’s internal security tools and more.

The streaming platform has identified a misconfigured server as the cause of the data breach. Currently, Twitch is also reporting no evidence of consumer PII or financial data loss which is a good sign for all users.

Protect Your Business Against Modern Cyber Threats

More than ever, organizations of all sizes have been facing a historical rise in cyber attacks and data breaches. Talk to a cyber security expert today and find out how we can provide expert consulting and a portfolio of Cyber Security solutions designed to protect your organization against today’s most prevalent threats.