Twitch said a 2021 security incident exposed documents from its source-code repository and a subset of creator payout data. The company said passwords, full credit-card numbers and bank information were not accessed. Those are Twitch’s findings from its October 15, 2021 update—not a statement about account security today.
What happened in the Twitch security incident?
On October 6, 2021, Twitch said it had learned that some data was exposed to the internet after a server-configuration error and accessed by a malicious third party. The company said its investigation was ongoing at that point.
In an October 15 update, Twitch attributed the incident to a server configuration change that allowed an unauthorized third party improper access. Twitch said it corrected the configuration issue and secured its systems. Amazon’s Q3 2021 filing separately described an October incident at Twitch involving limited data extracted and exposed to the internet, and said Amazon was continuing to investigate and assess it. Twitch’s October 15 update; Amazon’s Q3 2021 Form 10-Q.
What data did Twitch say was exposed?
Twitch’s October 15 update said: “The exposed data primarily contained documents from Twitch’s source code repository, as well as a subset of creator payout data.” The statement describes categories of material, not a complete inventory of every exposed file.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →#1 Best Overall
Twitch said its review found that only a small fraction of users were affected, characterized customer impact as minimal and said it would contact affected people directly. Those are Twitch’s qualitative conclusions; its update did not give a numerical count of affected users or payout records.
Were Twitch passwords or bank details exposed?
According to Twitch’s October 15 statement, passwords were not accessed, nor were the systems storing bcrypt-hashed login credentials. Twitch also said full credit-card numbers and ACH or bank information were not accessed. These statements reflect Twitch’s account of the 2021 incident and should not be read as a guarantee about present-day account security.
Rank #2
- Ideal for Gifting
- Ideal for a bookworm
- Compact for travelling
Did streamers need to change their stream key?
Twitch said it reset all stream keys as a precaution. It said users of Twitch Studio, Streamlabs, Xbox, PlayStation and the Twitch mobile app did not need to take action. OBS users whose Twitch accounts were not linked to OBS might need to copy the replacement key from Twitch and enter it in OBS manually. This guidance concerned the October 2021 reset.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What is confirmed—and what was not established?
Twitch’s later update narrowed the account from the uncertainty in its initial October 6 notice: it identified repository documents and some creator payout data, specified information it said was not accessed, and described its review and response. Early online claims about the archive’s size, complete source-code contents, password exposure or creator payout totals are not confirmed by the primary sources cited here. Neither Twitch’s update nor Amazon’s filing provides a verified quantity for the exposed material.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Fix the driver behind crashes, sound loss and screen glitches3Clear out junk files and repair common Windows errorsQuick Recap
Best Value
- It can be a gift option
- Comes with secure packaging
- Helpful in various ways
Rank #4
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
