Twitch Data Breach
| Company | Twitch |
|---|---|
| Breach Date | October 6, 2021 |
| Disclosure Date | October 6, 2021 |
| Records Affected | Undisclosed |
In October 2021, an anonymous hacker leaked 125 GB of Twitch's internal data including the platform's complete source code, creator payout records, and internal tools. The leak revealed how much top streamers earned and exposed proprietary Amazon game development projects.
What Happened
On October 6, 2021, a 125 GB torrent labeled "part one" was posted to 4chan, containing Twitch's entire source code repository, internal tools, and three years of creator payout data. The leaker stated their motivation was to "foster more disruption and competition in the online video streaming space" and described Twitch's community as a "disgusting toxic cesspool." The data was exfiltrated due to a server configuration change that allowed unauthorized access. Twitch confirmed the breach was caused by a server misconfiguration and stated that passwords were not exposed because they use bcrypt hashing. The company reset all stream keys as a precaution.
What Data Was Exposed
- Twitch's complete source code
- Creator payout reports from 2019-2021 (earnings of all streamers)
- Internal security tools and red team penetration testing reports
- Proprietary SDKs and internal AWS services
- An unreleased Amazon Game Studios competitor to Steam (codenamed Vapor)
- Twitch's internal communication tools
- Mobile, desktop, and console client source code
Who Is Affected
All Twitch creators who received payouts had their earnings exposed publicly. Twitch's internal development teams and security infrastructure were fully exposed. While Twitch stated login credentials were not compromised, the source code leak could enable future attacks.
How to Check If You Were Affected
Twitch confirmed the breach affected all users. If you had a Twitch account in October 2021, take precautionary steps. Creator payout data is searchable online. Visit HaveIBeenPwned.com to check if your email appears in the breach data. Twitch reset all stream keys, so check your streaming software configuration.
What You Should Do Now
- Change your Twitch password immediately
- Enable two-factor authentication on your Twitch account
- Reset your stream key in your Twitch dashboard
- If you are a Twitch creator, be aware your payout history is public
- Be cautious of phishing attempts using information from the leak
- Review connected third-party applications and revoke unnecessary access
Last updated: February 10, 2026