Twitch has been hacked!

[WeRnIE]

If you have a Twitch.tv account, your password might have been compromised (if hackers have skills to decrypt them).

Please change your passwords if you have used the same ones.

Stay safe.


E-mail received:

We are writing to let you know that there may have been unauthorized access to some of your Twitch user account information, including possibly your Twitch username and associated email address, your password (which was cryptographically protected), the last IP address you logged in from, and any of the following if you provided it to us: first and last name, phone number, address, and date of birth.
For your protection, we have expired your password and stream keys. In addition, if you had connected your account to Twitter or YouTube, we have terminated this connection.
You will be prompted to create a new password the next time you attempt to log into your Twitch account. If applicable, you will also need to re-connect your account to Twitter and YouTube, and re-authenticate through Facebook, once you change your password. We also recommend that you change your password at any other website where you use the same or a similar password.
We apologize for this inconvenience.
The Twitch Team
​

 

[Shin]

When I logged on to Twitch earlier, it automatically required me to change my password.

Stream keys and all other secure information has been reset as well, so it seems they have the situation under control.

Thanks for the notice. :laugh:

 

[WeRnIE]

Having situation 'Under control' will not bring back leaked information, that's the least they can and HAVE to do.

 

[Tyler]

Well it just so happens that by a stroke of luck that I deleted my twitch account yesterday.


Thanks for the info.

 

[WeRnIE]

You're are welcome, Twitch does not say when their database was accessed, it could have been earlier, plus your information still could have been there.

 

[vegeta508]

Thanks for the warning, thankfully I use different passwords for nearly every website I make an account on.

 

Yea got the same email.

Its been ages I logged in to twitch... I hope the password wasnt the same :/

 

[escorted]

Good looking out!

 

[J i n]

Thanks for the warning.

Twitch emails go straight to my Spam folder.

 

[shade082]

Thanks man, saved me

 

[Not Stable]

Thanks for heads up just found out here

 

[Justice1337]

Oh, thanks for posting this!

 

[isore11]

thanks for informing us

 

[Luckerdog]

Glad I saw this, for some reason the mail went to junk. It forced me to change when I logged in though, not sure if happened to everyone

 

[n4n0]

Glad I saw this, for some reason the mail went to junk. It forced me to change when I logged in though, not sure if happened to everyone

Yes, everyone was forced to change their password.

 

[Luckerdog]

Ah okay wasn't sure cause my girlfriends twitch was logged in and I thought she hadn't gotten on to change it, but apparently she did so I was confused lol

 

[FreeFragster]

Well it just so happens that by a stroke of luck that I deleted my twitch account yesterday.


Thanks for the info.

I'd be fairly confident the databases would have been leaked before it was announced High chance you're probably still vulnerable, also most big companies will not delete all of your account information straight away they'll wait several days/weeks and just make it invisible.

 

[SKRUBZ]

I assume this is connected to the puush hacking. Thank you for the warning

 

[Tst1994]

I assume this is connected to the puush hacking. Thank you for the warning

Possible, but I doubt it. And wasn't powerbot database compromised too like a few months ago?

 

[Glader]

Twitch is a major company owned by Amazon. Given that, you can bet your life that your passwords were hashed. It's also reasonable to assume major American based modern IT service oriented companies, such as ones involved in streaming, adopt NIST standards for hashing or something comparable like bcrypt. If so, and it's reasonable to think so, a new password is approximately as secure as your old password given same length and character set.

No point in changing your password, Twitch isn't run by a 15 year old with plaintext passwords sitting in a DB so unless you have unpublished papers sitting around about vulnerabilities in well known hashing algorithms you don't have to sweat it.