FAO Twitch Streamers: Security Breach 3rd March

Boogaloo

Well-Known Member
Twitch Team via E-mail said:
We are writing to let you know that there may have been unauthorized access to some of your Twitch user account information, including possibly your Twitch username and associated email address, your password, the last IP address you logged in from, and any of the following if you provided it to us: first and last name, phone number, address, and date of birth. While we store passwords in a cryptographically protected form, we believe it’s possible that your password could have been captured in clear text by malicious code when you logged into our site on March 3rd.

For your protection, we have expired your password and stream keys. In addition, if you had connected your account to Twitter or YouTube, we have terminated this connection.

You will be prompted to create a new password the next time you attempt to log into your Twitch account. If applicable, you will also need to re-connect your account to Twitter and YouTube, and re-authenticate through Facebook, once you change your password. We also recommend that you change your password at any other website where you use the same or a similar password.

We apologize for this inconvenience.

The Twitch Team
Code:
http://blog.twitch.tv/2015/03/important-notice-about-your-twitch-account/
Twitch has confirmed that users' credit card info is safe.

In a customer e-mail sent to our own Wesley Yin-Poole, the company stated, "Twitch does not store or process full credit or debit card information, so your card number is safe."

As far as what was compromised, Twitch said this could potentially include, "your Twitch username and associated email address, your password (which was cryptographically protected), the last IP address you logged in from, limited credit card information (card type, truncated card number and expiration date), and any of the following if you provided it to us: first and last name, phone number, address, and date of birth."
http://www.eurogamer.net/articles/2015-03-23-twitch-accounts-have-been-compromised

Had to reauthorise Elgato Software to broadcast to Twitch so those who stream directly from their console may need to reauthorise again once your password has changed.

Stay safe and happy gaming.
 
Top