Twitch says ‘server configuration change’ led to massive data leak | Engadget

Twitch has released an update on a massive hack that appears to have exposed source code, streamer payment figures and other information. It said that data was exposed to the internet “due to an error in a Twitch server configuration change that was subsequently accessed by a malicious third party.” It added that its teams are working with “urgency” to investigate the attack. 

The Amazon-owned streaming site added that it has “no indication” that any login credentials, including passwords, were exposed. “Additionally, full credit card numbers are not stored by Twitch, so full credit card numbers were not exposed,” the company said.

Yesterday, attackers said they stole the “entirety of Twitch.tv,” including the site’s mobile, desktop and console Twitch clients. It also accessed proprietary SDKs and internal AWS services, red-teaming tools and more. All of that information could make Twitch vulnerable to future attacks by letting potential hackers probe for weaknesses. 

The leak also shows creator payments in the millions for streamers like xQc, Nickmercs and Shroud. Several have confirmed that the figures are accurate. 

Twitch said that the investigation is ongoing. “We are still in the process of understanding the impact in detail,” the company wrote. 

All products recommended by Engadget are selected by our editorial team, independent of our parent company. Some of our stories include affiliate links. If you buy something through one of these links, we may earn an affiliate commission.

For all the latest Technology News Click Here 

 For the latest news and updates, follow us on Google News

Read original article here

Denial of responsibility! TheDailyCheck is an automatic aggregator around the global media. All the content are available free on Internet. We have just arranged it in one platform for educational purpose only. In each content, the hyperlink to the primary source is specified. All trademarks belong to their rightful owners, all materials to their authors. If you are the owner of the content and do not want us to publish your materials on our website, please contact us by email – [email protected] The content will be deleted within 24 hours.