Twitch.tv Compromised

[thebennyboy]

So it seems twitch.tv may have been hacked. After amazon bought it, you would have thought they would have bolstered up the security a bit. Seems out that didn't happen. They are going to force you to reset your password and you will need to generate a new stream key. Anyone who had their twitter and/or youtube account connected to their twitch account will also need to reconnect them.

 

We are writing to let you know that there may have been unauthorized access to some Twitch user account information.

 

For your protection, we have expired passwords and stream keys and have disconnected accounts from Twitter and YouTube. As a result, you will be prompted to create a new password the next time you attempt to log into your Twitch account.

 

We also recommend that you change your password at any website where you use the same or a similar password. We will communicate directly with affected users with additional details.

Sincerely,

Twitch Staff

 

Source: http://blog.twitch.tv/2015/03/important-notice-about-your-twitch-account/

 

 

EDIT:

 

We are writing to let you know that there may have been unauthorized access to some of your Twitch user account information, including possibly your Twitch username and associated email address, your password, the last IP address you logged in from, limited credit card information (card type, truncated card number and expiration date), and any of the following if you provided it to us: first and last name, phone number, address, and date of birth.

 

PLEASE NOTE: Twitch does not store or process full credit or debit card information, so your card number is safe.

 

While we store passwords in a cryptographically protected form, we believe it’s possible that your password could have been captured in clear text by malicious code when you logged into our site on March 3rd.

For your protection, we have expired your password and stream keys. In addition, if you had connected your account to Twitter or YouTube, we have terminated this connection.

 

You will be prompted to create a new password the next time you attempt to log into your Twitch account. If applicable, you will also need to re-connect your account to Twitter and YouTube, and re-authenticate through Facebook, once you change your password. We also recommend that you change your password at any other website where you use the same or a similar password.

We apologize for this inconvenience.

 

The Twitch Team

 

Thanks PyroDonkey for the e-mail quote

[Jade]

For those who didn't read the whole thing. It's going to force you to reset your password and your stream key will also reset.

[Agons]

Bugger

[AlexGoesHigh]

dammit, i hate to change passwords -.-

[Wirbelfeld]

Any company can be hacked. ITs not like just because they were bought by a big company they would be immune to hacks. Even large companies today get hacked quite frequently

[Crazy Ginger]

thankfully i used a stupidly simple password that computers would find very hard to decipher, all thanks to xkcd.  now i just need to come up with a string of random words... maybe a number or two.  maybe ill throw in a symbol if i feel like it

[Thony]

I knew a something fishy was going on when nobody could stream and every game had 0 viewers.

Security means nothing to hackers who want to hack somthing real bad. They will find the way, they always have. Cant be stopped.

[PyroDonkey]

I would like to expand this with the email that I got because it seems to be a lot worse than just some missing passwords.

 

 

We are writing to let you know that there may have been unauthorized access to some of your Twitch user account information, including possibly your Twitch username and associated email address, your password, the last IP address you logged in from, limited credit card information (card type, truncated card number and expiration date), and any of the following if you provided it to us: first and last name, phone number, address, and date of birth.

PLEASE NOTE: Twitch does not store or process full credit or debit card information, so your card number is safe.

 

While we store passwords in a cryptographically protected form, we believe it’s possible that your password could have been captured in clear text by malicious code when you logged into our site on March 3rd.

For your protection, we have expired your password and stream keys. In addition, if you had connected your account to Twitter or YouTube, we have terminated this connection.

 

You will be prompted to create a new password the next time you attempt to log into your Twitch account. If applicable, you will also need to re-connect your account to Twitter and YouTube, and re-authenticate through Facebook, once you change your password. We also recommend that you change your password at any other website where you use the same or a similar password.

We apologize for this inconvenience.

 

The Twitch Team

 

So, they have a lot more than just that, it seems.

[Speedbird]

Crap, used my old insecure password for Twitch. Now I have to change a lot of sites... Thank god I enabled Login Approvals for Facebook.

[Jeramathi1992]

Funny having to change my 12 character randomized password that I had for twitch.

[ElDiabeto]

Does anyone know if this will affect the Steam accounts that are connected to Twitch accounts? They mentioned twitter and YouTube, but not steam.

[emachado99]

Phew, I thought someone was just targeting my account...

Glad to see I'm not the only one affected

[Geldar]

Dammit, why cant large companies get this right!

[Uwillparish]

i think they should pop up a notification everytime you log in for like a week, but allow you to skip it each time

[Misanthrope]

Any company can be hacked. ITs not like just because they were bought by a big company they would be immune to hacks. Even large companies today get hacked quite frequently

 

Again this is not a valid argument, I'll use the same analogy that I used before: "Any lock can be defeated, henceforth I shall leave my door wide open because my lock is useless"

[WolfDeville]

I didn't read it all. Does this affect everyone or just streamers? I'd imagine it would be everyone.

[JAKEBAB]

Lmao why is this post so repetitive?

[Wirbelfeld]

Again this is not a valid argument, I'll use the same analogy that I used before: "Any lock can be defeated, henceforth I shall leave my door wide open because my lock is useless"

I didn't say you shouldn't invest in security. I said that it is still possible to be hacked no matter how much u invest in it. I don't see why you start and argument where there is none

[Misanthrope]

I didn't say you shouldn't invest in security. I said that it is still possible to be hacked no matter how much u invest in it. I don't see why you start and argument where there is none

 

Because in this context, it seems a bit apologetic and defensive of Twitch. If it was not intended like that however that's ok so let's carry on.

[Epis]

I'm glad Twitch told everyone. Simply hiding the fact that they were compromised would be easier and wouldn't have damaged their image - but they have the integrity to tell everyone the truth.

[sof006]

Oh well at least they noticed and are doing everything in their power to protect their users.

[Dude]

https://haveibeenpwned.com/

 

Check here before you panic.