Twitch says source code exposed in last week's data breach

Twitch said on Friday that last week’s data breach at the live streaming e-sports platform contained documents from its source code.

Passwords, login credentials, full credit card numbers and bank details of users were not accessed or exposed in the breach, Twitch said in a statement.

We have an update for the community regarding last week’s security incident. Please visit the Twitch blog for more information https://t.co/DatpHD4Bja

— Twitch (@Twitch) October 15, 2021

The platform, which is used by video gamers for interacting with users while live streaming content, had blamed the breach on an error in the server configuration change.

Server configuration changes are performed during server maintenance. A faulty configuration can expose the data stored in the servers to unauthorized access.

Twitch said it was “confident” the incident affected only a small number of users and that it was contacting those who had been directly impacted. The platform has more than 30 million average daily visitors.

Video Games Chronicle had reported that about 125 gigabytes of data was leaked in the breach, including details on Twitch’s highest-paid video game streamers since 2019.