The internet woke up to quite the ordeal today when a massive Twitch leak revealed a slew of sensitive information, including the alleged incomes of thousands of streamers on the platform. There’s still a lot of concern and uncertainty surrounding the leak and its origin, but a first-hand source has weighed in. A Twitch developer has spoken with Shacknews and says that it’s likely that the leak originated internally.
Following the massive Twitch leak earlier this morning, we got in contact with a member of Twitch’s development team to get their take on the situation. Their identity will remain anonymous throughout this article. During our chat, the employee stressed how difficult it is just for them to log in and have access to sensitive information and controls at Twitch, which makes it tough to believe this attack could have been coordinated entirely from the outside.
We can confirm a breach has taken place. Our teams are working with urgency to understand the extent of this. We will update the community as soon as additional information is available. Thank you for bearing with us.— Twitch (@Twitch) October 6, 2021
The quotes from the developer confirm that Twitch leadership is still not sure where the leaks originated from. One of the more concerning aspects of this data breach is one that hasn’t been talked about nearly as much as streamer salaries - Twitch’s AutoModeration code is out in the wild.
Prior to today’s leak, Twitch had been dealing with the ongoing issue of hate raids on the platform, in which large amounts of bots would flock to a channel, spamming its live chat with hateful messages. It’s an issue that led Twitch to add new verification tools, enabling streamers to better control who is allowed to talk in their chat.
The new verification options work in tandem with Twitch’s AutoMod, which detects and addresses language and other behaviors that violate the Terms of Service. Those that are dedicated to orchestrating hate raids on the platform may now be equipped with the sensitive information they need in order to skirt around the barriers currently in place.
The situation surrounding the Twitch leak is unresolved and is still evolving. If Twitch confirms that these leaks did indeed come from the inside, we'll be sure to update this article, as well as our Twitch topic page, with new information.