Massive Twitch 4chan leak includes list of the top 10,000 streamer payouts

A major data leak at Amazon and Twitch has exposed a great deal of information, allegedly including Twitch's source code and its top creator payouts.

61

UPDATED (10/6/2021 @ 2:00 a.m. PT): Twitch has since confirmed on Twitter that a breach did indeed of data did indeed take place and has taken steps to attempt to sort out the matter, promising to share updates on the situation as soon as possible.

Furthermore, recently, an anonymous source at Twitch shared with Shacknews that based on the nature, degree, and specifics of the leak, it's highly likely that the leak was internal.


It’s a rough morning for Twitch and Twitch users going into today. Apparently, overnight, hackers got into a lot of behind-the-curtain data on the Twitch platform and have posted it on 4chan. Quite a lot was claimed to have been taken in the leak. The hackers claiming responsibility claimed to have gotten at Twitch’s source code, data on its mobile, TV, and gaming clients, data of its owned subsidiaries, and even the payouts for its top streamers, which were openly shared.

This leak was reported and confirmed by various sources on October 6, 2021, including Video Games Chronicle. Reportedly, a torrent file of about 125GB of data was dropped on 4chan, which could be downloaded as of this morning to access a deluge of content relating to Twitch. Among that information was the 2019 payout reports for top streamers like Shroud and CohhCarnage. VGC was told by anonymous sources that the leaked data was indeed legitimate and Twitch has been internally aware of the leak. The data is alleged to have been taken as recently as Monday, October 4, 2021.

According to posts on 4chan, the hack included breach and exposure of the following info:

  • The entirety of Twitch’s source code with comment history “going back to its early beginnings”
  • Creator payout reports from 2019
  • Mobile, desktop and console Twitch clients
  • Proprietary SDKs and internal AWS services used by Twitch
  • “Every other property that Twitch owns” including IGDB and CurseForge
  • An unreleased Steam competitor, codenamed Vapor, from Amazon Game Studios
  • Twitch internal ‘red teaming’ tools (designed to improve security by having staff pretend to be hackers)

PSA: Not listed is the fact that apparently passwords may have also been part of the breach, as discovered by various Twitter users combing the data. As such, it is suggested that Amazon and Twitch users may want to change their passwords and enable 2-factor authentication as an extra means of security. There are guides on how to do so on Amazon and Twitch readily available.

Twitch has been making moves to try to stop hate raid bots recently, but there is still plenty of work to be done. The hackers claim their goal was to “foster more disruption and competition in the online video streaming space” because Twitch’s “community is a disgusting toxic cesspool.” It is unclear if these actions were in retaliation for the hate raid bots or in support of them. Nonetheless, a password change may be in order as Twitch and Amazon sort out their situation.

News Editor

TJ Denzer is a player with a passion for games that has dominated a lifetime. When he's not handing out beatdowns in the latest fighting games, exploring video game history, or playing through RPGs with his partner, he's searching for new food and drinks in the constant pursuit of good times with good people inside and outside the South Texas area. You can also find him on Twitter @JohnnyChugs.

From The Chatty
  • reply
    October 6, 2021 7:20 AM

    TJ Denzer posted a new article, Massive Twitch 4chan leak includes list of the top 10,000 streamer payouts

    • reply
      October 6, 2021 3:46 AM

      Twitch’s source code was leaked
      ALSO CHANGE YOUR TWITCH PASSWORD supposedly those were leaked too

      https://www.theverge.com/2021/10/6/22712250/twitch-hack-leak-data-streamer-revenue-steam-competitor

      Has the revenue of a lot of top streamers from aug 2019 to oct 2021 which is crazy

      • reply
        October 6, 2021 4:05 AM

        Are those earnings numbers in dollars?

        https://pastebin.com/LjmaPNam

        If so, that's crazy that the top guy pulled in 9+ million since supposedly August 2019, which is what I'm hearing these numbers are for. I knew they were really well paid, I just didn't know the actual scale of it.

        • reply
          October 6, 2021 4:19 AM

          CriticalRole is a group of people playing D&D, with a huge following. Not surprising really.

        • reply
          October 6, 2021 4:36 AM

          66k per month for Cohh. That's very impressive. :)

          • reply
            October 6, 2021 4:41 AM

            I legit feel bad for him because he tries to stay forever humble and it sucks getting his financial data just tossed out there

            • reply
              October 6, 2021 4:47 AM

              He's earned every cent. Such a good dude. I watch him almost every day for the last 4-5 years and sub to him with my Prime. It floors me how much he makes, well, all of them really, but I really feel like he deserves it.

              • reply
                October 6, 2021 5:10 AM

                Yeah, that is great for him. Being an entertainer daily for hours on end, for thousands of people... definitely not an easy job.

              • reply
                October 6, 2021 5:37 AM

                He's a good guy and fun streamer. I struggle with watching him sometimes though depending on his mood as his ADD drives me crazy.

              • reply
                October 6, 2021 10:05 AM

                Agreed. I don't watch him much but I have in the past. He is a good person and is very entertaining. He has definitely earned all he gets.

            • reply
              October 6, 2021 7:47 AM

              You are not humble if you pretend to not make money.

              • reply
                October 6, 2021 9:05 AM

                Cohh specifically has stated several times that people do not need to sub to him or donate. In fact every donation he does get goes to his mod team and he pays them out of pocket so some of them do the gig as their full time job.

                He also has stated several times he would like to disclose how he does so people don’t just gift him money but is under contract with twitch so he is not allowed to disclose it.

                He even said this morning that he hopes all this allows him to finally do so publicly. He’s got three kids and needs to support his family but even he has acknowledged things are kind of ridiculous now and actively discourages subs, donations and the like.

                That’s not the case for all these high paid streamers but Cohh is pretty real.

                • reply
                  October 6, 2021 4:04 PM

                  Oh he’s powerless to stop donations I didn’t know that. Sorry.

          • reply
            October 6, 2021 9:24 AM

            Probably closer to 100k with donations which are separate and sponsorships.

        • reply
          October 6, 2021 5:56 AM

          Should took like half of that off at mixer lol

        • reply
          October 6, 2021 6:23 AM

          So that’s earning over about 2 years? Honestly that’s lower than I would have thought for a lot of big name streamers.

          • reply
            October 6, 2021 9:26 AM

            This is just subs. Donations and external partnershps are separate. For instance some gambling sites are paying these guys $1 million to 1.5 million a month(yes a month) to peddle to young kids.

        • reply
          October 6, 2021 7:07 AM

          Good lord, Amouranth made $1.3m?!?!!?

        • reply
          October 6, 2021 7:17 AM

          Shacknews didn't break the top 10k streamers??? WAT?

          Otzdarva sitting at $650k. Not too shabby at all. Not retirement bucks, but for playing video games, that's really quite nice! Grats to him!

        • reply
          October 6, 2021 7:56 AM

          Over 800 people making at least 6 figures. That's a bit thicker tail than I expected.

          • reply
            October 6, 2021 8:12 AM

            Conversely only 4000 or so making more than 25k a year.

            Don't quit your day job.

            • reply
              October 6, 2021 8:20 AM

              I’m assuming this is subs only and does not include donations through stream labs

            • reply
              October 6, 2021 11:36 AM

              This is the most important stat and the info I was most interested to know. How much do the B or C tier streamers pull down and how many are there?

        • reply
          October 6, 2021 10:35 AM

          Did anyone download the file? It’s no longer available but I’d like to calculate the Gini coefficient and get a sense of the income inequality for streamers.

      • reply
        October 6, 2021 4:42 AM

        Whoa. That’s a big leak.

      • reply
        October 6, 2021 5:11 AM

        Cohh just said live on his channel that some of the "lists" are not accurate, but he still can't talk about how much he makes due to contractual obligations to Twitch. Also he said that he's "well off" and there's a reason he give all tips from PayPal to his mod team, etc. Very humble and as honest as he can be. Love this dude. But take the numbers leaked with a grain of salt. Some may be accurate, some not.

        • reply
          October 6, 2021 5:34 AM

          Also, is gross in this case pretax AND pre Twitch-cut? That number may be much smaller after all those deductions.

        • reply
          October 6, 2021 5:51 AM

          Here's his statement https://www.youtube.com/watch?v=1nW5co4aXP0

          • reply
            October 6, 2021 8:09 AM

            Damn, dude is making so much money on twitch that he has too much and asks people to sub to other streamers.

            • reply
              October 6, 2021 8:24 AM

              Yeah, when people sub bomb him he is like STOP IT! Lol. He's a good dude. Tips go to his mod team (which he pays too).

        • reply
          October 6, 2021 6:17 AM

          He has other streams of revenue like from YouTube.

          • reply
            October 6, 2021 7:19 AM

            He also very often gets paid directly by the publisher to stream their new games. I'm sure his revenue is at least 3-4 times that number.

      • reply
        October 6, 2021 6:06 AM

        I'm not saying I know anything one way or the other, because I'm pretty sure even looking at this stuff isn't legal, but as a friendly reminder to all devs on the shack... Hey, maybe don't hard code your AWS creds into your scripts.

      • reply
        October 6, 2021 6:10 AM

        Never a bad idea to reset the pw. Plus, I didn't realize I didn't have 2fa enabled, so got that taken care of at the same time.

      • reply
        October 6, 2021 6:23 AM

        So ... shitty github security and at least one repository having db credentials in the repository?

        • reply
          October 6, 2021 6:28 AM

          Always nice to get a reminder that you're not so bad at your job after all lol

          • reply
            October 6, 2021 7:30 AM

            No shit; although I'm not going to ever throw a rock from my fragile glass house.

          • reply
            October 6, 2021 10:06 AM

            that's two this week. i didn't do a goddamn thing at work and i'm ahead!

      • reply
        October 6, 2021 6:25 AM

        MFA is busted, can't receive any auth codes

        • reply
          October 6, 2021 6:47 AM

          Worked for me just a little while ago.

        • reply
          October 6, 2021 7:02 AM

          Just worked for me but it did reject one of my auth codes and I had to resend. Probably getting hammered.

        • reply
          October 6, 2021 7:19 AM

          Authy worked for me just now.

      • reply
        October 6, 2021 6:58 AM

        Pretty pathetic to see people donate money to these streamers in an attempt to feel like they have some relationship

        • reply
          October 6, 2021 7:01 AM

          I mean, people spend money on all kinds of dumb shit. Is this where we draw the line?

          • reply
            October 6, 2021 7:03 AM

            Paying to see X is dumb, but paying to see Y is cool!

            • reply
              October 6, 2021 10:40 AM

              Don't you dare spend money on midget chocolate sex!!! Giraffe banana sex is worth the money though.

          • reply
            October 6, 2021 7:26 AM

            Maybe a better way to put it would be

            People don't mind spending money on entertainment.

        • reply
          October 6, 2021 7:09 AM

          How about supporting an artist because you enjoy the stuff they make? Is that also pathetic?

        • reply
          October 6, 2021 7:13 AM

          A lot of these people support themselves purely via subscription model. The direct to consumer model is allowing a lot video game related media thrive while traditional advertising and private equity is slowly killing it. The former GB guys founding Nextlander is a prime example.

          • reply
            October 6, 2021 7:28 AM

            I am having a hard time getting into Nextlander vids despite liking all those guys. I think not being in the same room really hurts the format.

            • reply
              October 6, 2021 7:32 AM

              Yeah, same. Frankly, I think they've lost the energy and passion for the work. They're all burned out. I had hoped the break between GB and NL would energize them but it didn't. I compare them to Waypoints who have really been energized by the launch of Waypoints+. They brought Natalie Watson back this week to replace Austin and I am pretty excited. Patrick and Cado have been streaming this Kirby golf game and it's been hilariously entertaining. Watching Vinny and Brad try and play Hitman this week, in contrast, was just boring and kinda sad.

              • reply
                October 6, 2021 7:37 AM

                I'll check out Waypoints, thanks. And yeah, I think ultimately what we're seeing is the result of the pandemic and how it's affected things.

                I know I'm having a hard time focusing on work after a year+ of doing it at home, and I'm sure the same is true for them.

                We all need a good vacation and to be able to get together and hang out. Hopefully that won't be too far off.

              • reply
                October 6, 2021 7:48 AM

                Nextlander needs another personality that Vinny can bounce off of. A lot of the time Vinny falls flat because he can't throw stuff off Brad or Alex the same way he could Jeff, Ryan, or Dan. And yeah the not being able to feed off each other being in the same location hurts. You are seeing the same thing with Giant Bomb as well, since they are all remote the content suffers.

                Also the Nextlander podcast really isn't doing it for me. It is very mechanical compared to what the Bombcast and Beastcast were. Although I am really enjoying the Fire Escape podcast with Mary, Mike, and Dan.

                • reply
                  October 6, 2021 7:50 AM

                  Yeah you can tell that with the pod they are really sticking to a tight structure and time constraint. I really only listen to it on Mondays when I am out of everything else.

            • reply
              October 6, 2021 10:11 AM

              They're just all too similar to each other. They need another person or two to create a more dynamic set of interactions and opinions.

          • reply
            October 6, 2021 7:29 AM

            Yeah i started giving to nextlander and I'm considering dropping Giant Bomb, though I signed up again. They killed the one show I wanted to watch (said its on hiatus, born to run) and the other content, hasnt been catching me. Podcast is still allright though.

            • reply
              October 6, 2021 7:35 AM

              Yeah I dropped my sub when all the changes happened. None of their new shows appeal to me. That's really interesting about Born to Run. I watched some of that before my sub expired. I didn't like it because of how edited it was. Also makes me concerned that RV is going to make them drop content quickly if it doesn't get traction fast. Honestly, I am getting ready to drop Nextlander too. Those guys hearts just aren't in it.

              • reply
                October 6, 2021 8:28 AM

                Their video content hasn't grabbed me but I do like the podcast.

            • reply
              October 6, 2021 8:49 AM

              Yeah, b2r was on hiatus because Danny was in Ireland for 3 weeks and now Jeff is off for a few months with the new baby.

        • reply
          October 6, 2021 7:17 AM

          dumb post

        • reply
          October 6, 2021 7:24 AM

          this is a hot take

          • reply
            October 6, 2021 11:31 AM

            Added this thread to my favorites just because of that post.

        • reply
          October 6, 2021 7:28 AM

          This dude beat me so badly in a Destiny 2 match that I just had to go to his channel and subscribe. The thrashing was that bad.

        • reply
          October 6, 2021 7:34 AM

          I make sure to sub to any Warhammer content I like on Twitch. I want the content creators to continue to make it, and to encourage hosted streams that it's a viable platform to participate on.

        • reply
          October 6, 2021 7:41 AM

          Don’t worry nobody would want to donate to you anyway

        • reply
          October 6, 2021 8:01 AM

          Kids these days! In my day you had a paper route if you wanted to earn money! You didn't suck on microphones for subs!

          • reply
            October 6, 2021 8:17 AM

            "I mean, you got these people, these kids - they're really just kids! Eighteen; twenty years old. They play video games all day in the dark. Curse and use foul language - and people love it! I hear they can make a million dollars, just playing these games full of violence. Sex...you name it. When I was a kid, I worked at the local hardware store - I learned the difference between a pipe wrench and a monkey wrench. Valuable skills...I worked hard to earn a dollar, and I eventually bought that hardware store when the original owner lost it due to foreclosure 'cause of medical bills. Got it for a steal, too. Now I make my money the American way, by paying my employees minimum wage and not offering benefits. God-damned streamers...foul-mouthed lazy little shits."

        • reply
          October 6, 2021 8:08 AM

          Haha wtf

        • reply
          October 6, 2021 8:22 AM

          Mediocre!

        • reply
          October 6, 2021 8:44 AM

          Can confirm, am pathetic

        • reply
          October 6, 2021 9:15 AM

          ya it's creepy - "chat" at this point can be swapped with "congregation"

          • reply
            October 6, 2021 9:22 AM

            Except they don't pretend the fictional content that they preach is real

        • reply
          October 6, 2021 9:20 AM

          Haha. Fucking losers with no friends, am I right? Ha. Ha. Ha -- :|

        • reply
          October 6, 2021 9:23 AM

          Can't say I've ever really seen the appeal in watching them but I can understand people paying money for things they enjoy. I've paid to see live music and stuff.

        • reply
          October 6, 2021 9:34 AM

          You're a good 5-10 years too late to this one, man.

        • reply
          October 6, 2021 11:49 AM

          Every day, this website gets more and more boomer.

        • reply
          October 6, 2021 12:46 PM

          How to say “I have no clue what I’m talking about” without actually saying it.

        • reply
          October 6, 2021 4:42 PM

          You should make a stream dedicated to this topic.

      • reply
        October 6, 2021 7:10 AM

        huh wonder if my commits are in there

      • reply
        October 6, 2021 7:20 AM

        I hope there are some juicy details about why Dr. Disrespect was perma-banned.

        I wonder if there are some commit comments or something around that time that could be clues.

      • reply
        October 6, 2021 7:27 AM

        Ugh.

        • reply
          October 6, 2021 7:33 AM

          Also pretty spectacular is that now it’s requiring me to enter in a code that it sent to my email but it wont actually send me an email and I’ve had this issue with Twitch for a long time as it constantly asked me to verify my email and when I would try I never would get it so I just had a banner on their site perpetually asking me to verify my email and now I can’t login because I can’t get that email for whatever reason and yes my email is correct.


          Ugh.

          • reply
            October 6, 2021 7:35 AM

            HA! Wow, great security set up Twitch - all I did was close the box that asked for the code and it logged me in anyway. Still haven’t got any emails with security codes.

      • reply
        October 6, 2021 8:04 AM

        Can you set up 2FA without a phone number? I click on enable 2FA but it prompt me for a phone number without the option for changing to an app-based Authenticator.

        • reply
          October 6, 2021 8:11 AM

          Authy has a desktop version, but I don't know if you can use it without a phoen number.

        • reply
          October 6, 2021 8:23 AM

          You will be able to add an app based authenticator after doing the phone number one.

          • reply
            October 6, 2021 8:24 AM

            Can you remove the SMS 2FA after adding the app?

            • reply
              October 6, 2021 8:26 AM

              I don't think so. It acts as a backup.

              • reply
                October 6, 2021 8:28 AM

                Damn SMS are insecure. Were the phone numbers included in the leak too?

                • reply
                  October 6, 2021 8:59 AM

                  don't know for sure but twitch outsources their 2FA to Authy, you can see it go over to Authy's website when you configure 2FA. i believe twitch never had those 2FA phone numbers to begin with

              • reply
                October 6, 2021 8:45 AM

                [deleted]

      • reply
        October 6, 2021 9:20 AM

        IMPORTANT This is not about changing your twitch password, this is about changing EVERYWHERE ELSE you re-use that password (as I know many of you probably do)

        • reply
          October 6, 2021 9:35 AM

          Time to change the password on my luggage then....

        • reply
          October 6, 2021 9:36 AM

          this is the spot where we who regularly deal with this at work chip in to say "yes please, do ^^that!^^"

        • reply
          October 6, 2021 9:47 AM

          When I used to do security training for new employees I used to always hammer them on creating a unique password for enterprise systems and not to reuse their personal passwords. So many people would roll their eyes.

        • reply
          October 6, 2021 11:04 AM

          I've changed to using unique password for everything a while ago. Everyone should be doing this.

          • reply
            October 6, 2021 11:52 AM

            Plenty of free password managers w/ good strong password generators to make this a no-brainer.

            • reply
              October 6, 2021 11:59 AM

              Exactly. Just not worth the risk re-using the same password since it's so easy now.

      • reply
        October 6, 2021 9:32 AM

        Where they plain text?

        • reply
          October 6, 2021 5:59 PM

          No hashed and salted most likely. People need to relax.

    • reply
      October 6, 2021 9:37 AM

      Anyone see how much Amouranth makes?

    • reply
      October 6, 2021 10:53 AM

      I just popped onto twitch to change my password, apparently my account no longer exists! My last login was in April, and received no security alerts since. Are their servers getting mashed or something?

Hello, Meet Lola