Skip to main content

Twitch says it’s been hit by hackers, orders password reset

twitch troll arrested amazon purchase
Image used with permission by copyright holder
Game-streaming site Twitch is pretty sure it’s been hit by hackers, forcing it to reset passwords for its enormous army of users.

“There may have been unauthorized access to some Twitch user account information,” the Amazon-owned company said in a blog post Monday.

An email sent by Twitch to affected users said that while it still wasn’t clear exactly what specific data had been compromised, it may include “your Twitch username and associated email address, your password (which was cryptographically protected), the last IP address you logged in from, and any of the following if you provided it to us: first and last name, phone number, address, and date of birth.”

As a precaution, users attempting to log into the site from Monday will be prompted to create a new password. As you’d expect, the San Francisco-based company also warns its users to reset their password on any other sites where they use the same or a similar password.

Twitch added that as part its response to the hack it’d also disconnected all accounts from Twitter and YouTube, meaning users will have to reauthorize them once they’ve reset their login information.

Twitch was acquired by Amazon last year in a deal worth $970 million. The popular site announced in January it’d averaged 100 million unique monthly viewers across 2014, a figure that suggests hackers may have just got their hands on a sizable amount of personal data. We’ve reached out to Twitch for more information on the security breach and will update if we hear back.

Editors' Recommendations

Trevor Mogg
Contributing Editor
Not so many moons ago, Trevor moved from one tea-loving island nation that drives on the left (Britain) to another (Japan)…
Hackers are using a devious new trick to infect your devices
A person using a laptop with a set of code seen on the display.

Hackers have long used lookalike domain names to trick people into visiting malicious websites, but now the threat posed by this tactic could be about to ramp up significantly. That’s because two new domain name extensions have been approved which could lead to an epidemic of phishing attempts.

The two new top-level domains (TLDs) that are causing such consternation are the .zip and .mov extensions. They’ve just been introduced by Google alongside the .dad, .esq, .prof, .phd, .nexus, .foo names.

Read more
No, 1Password wasn’t hacked – here’s what really happened
A person using the 1Password password manager on a laptop while sat on a couch.

Password managers have been struggling with security breaches in recent months, with LastPass suffering a particularly bad hack as a notable example. So when 1Password users got an alert last week saying their Secret Keys and passwords had been changed without their knowledge, they were understandably panicked. Luckily, all was not what it seemed.

That’s because AgileBits, the company behind 1Password, has just explained exactly what went wrong during that event. And while it wasn’t as bad as everyone first thought, it still doesn’t paint AgileBits in a particularly good light.

Read more
This Bing flaw let hackers change search results and steal your files
The new Bing preview screen appears on a Surface Laptop Studio.

A security researcher was recently able to change the top results in Microsoft’s Bing search engine and access any user’s private files, potentially putting millions of users at risk -- and all it took was logging into an unsecured web page.

The exploit was discovered by researcher Hillai Ben-Sasson at their team at Wiz, a cloud security firm. According to Ben-Sasson, it would not only allow an attacker to change Bing search results but would also grant them access to millions of users’ private files and data.

Read more