[News](/news) Amazon’s Twitch Falls Victim to 125 GB Data Breach [Blog](/blog)[Breaches](/breaches)[Resources](/resources)[News](/news) # Amazon’s Twitch Falls Victim to 125 GB Data Breach ##### [Catherine Chipeta](/team/catherine-chipeta) October 10, 2021 Twitch, an Amazon-owned live-stream gaming service, has fallen victim to an anonymous hacker who breached 125GB of data, including the service’s entire source code.  A torrent link containing the data cache was posted on 4chan by an anonymous user on October 6, 2021. The hacker stated their motive was to “foster more disruption and competition in the online video streaming space” because “\[Twitch’s] community is a disgusting toxic cesspool”. The breach was first reported by [*The Video Games Chronicle*](https://www.videogameschronicle.com/news/the-entirety-of-twitch-has-reportedly-been-leaked/)* *on the same day* *and by [Twitch’s official Twitter account](https://twitter.com/Twitch/status/1445770441176469512) shortly after.  Other sensitive data exposed by the breach include: * Twitch creator payout details from the past three years * Proprietary SDKs and internal AWS services used by Twitch * An unreleased Steam competitor from Amazon Game Studio * Twitch’s developer tools * Twitch’s information security tools * Data from other Amazon properties, such as IGCB and CurseForge  Additional [personally identifiable information (PII)](https://www.upguard.com/blog/personally-identifiable-information-pii) like credit card details and login credentials are not believed to have been exposed. [Twitch said the data exposure occurred](https://blog.twitch.tv/en/2021/10/06/updates-on-the-twitch-security-incident/?utm_referrer=https://t.co/) due to a server configuration error, which was subsequently [exploited](https://www.upguard.com/blog/exploit) in a cyber attack.  This marks the second major data breach for the gaming service since it was acquired by Amazon in 2014. In 2015, [Twitch announced to users that “unauthorized access”](https://blog.twitch.tv/en/2015/03/23/important-notice-about-your-twitch-account-aaa876745856/) may have compromised user account information, prompting all users to change their [passwords](https://www.upguard.com/blog/the-password-security-checklist). Twitch is also not the only Amazon property to suffer as a result of [cloud misconfiguration](https://www.upguard.com/blog/cloud-misconfiguration), with [Amazon S3’s security settings leading to thousands of data breaches over the past four years alone](https://www.upguard.com/blog/s3-security-is-flawed-by-design). This latest breach highlights the importance of implementing consistent [vulnerability management processes](https://www.upguard.com/blog/vulnerability-management) as threat actors are constantly scanning for holes in [network security](https://www.upguard.com/blog/network-security). ## How secure is Twitch? Twitch operates an interactive livestreaming platform where users broadcast and watch live video content. The service hosts streams across multiple categories including gaming, entertainment, sports, and music, allowing real-time interaction between broadcasters and viewers. * View our free preliminary report on Twitch’s security posture * 13 risk factors, including email security, SSL, DNS health, open ports and common vulnerabilities [View Twitch's score](/security-report/twitch) [View score](/security-report/twitch) [https://www.twitch.tv](/security-report/twitch) ### Sign up for our newsletter UpGuard's monthly newsletter cuts through the noise and brings you what matters most: our breaking research, in-depth analysis of emerging threats, and actionable strategic insights. ## Latest news Stay up-to-date with the latest news in cybersecurity. [](/news/hugging-face-data-breach-2026-07-20) #### [Hugging Face data breach: key facts and what we know so far](/news/hugging-face-data-breach-2026-07-20) A data breach involving Hugging Face was reported in July 2026. See incident details, impact on customers, and recommended security measures. ##### [UpGuard Team](/team/upguard) July 20, 2026 [](/news/ey-data-breach-2026-07-19) #### [EY data breach: what happened and what's at risk](/news/ey-data-breach-2026-07-19) A data breach involving EY was reported in July 2026. See incident details, impact on customers, and recommended security measures. ##### [UpGuard Team](/team/upguard) July 15, 2026 [](/news/south-florida-injury-convenient-care-data-breach-2026-07-16) #### [South Florida Injury & Convenient Care data breach exposes names and Social Security numbers](/news/south-florida-injury-convenient-care-data-breach-2026-07-16) A data breach involving South Florida Injury & Convenient Care was reported in July 2026. See incident details, impact on customers, and security measures. ##### [UpGuard Team](/team/upguard) July 15, 2026 [](/news/park-west-psychology-data-breach-2026-07-16) #### [Park West Psychology data breach: what happened and what's at risk](/news/park-west-psychology-data-breach-2026-07-16) A data breach involving Park West Psychology was reported in July 2026. See incident details, impact on customers, and recommended security measures. ##### [UpGuard Team](/team/upguard) July 15, 2026 [](/news/fall-river-municipal-credit-union-data-breach-2026-07-16) #### [Fall River Municipal Credit Union data breach: what happened and what's at risk](/news/fall-river-municipal-credit-union-data-breach-2026-07-16) A data breach involving Fall River Municipal Credit Union was reported in July 2026. See incident details, impact on customers, and recommended security measures. ##### [](#) July 14, 2026 [](/news/npcil-data-breach-2026-07-16) #### [NPCIL data breach: World Leaks claims exposure of Kudankulam Nuclear Power Plant files](/news/npcil-data-breach-2026-07-16) A data breach involving NPCIL was reported in July 2026. See incident details, impact on customers, and recommended security measures. ##### [UpGuard Team](/team/upguard) July 14, 2026 [View all news](/news) ## Protect your organization Get in touch or book a free demo. [Contact sales](/demo) [Free demo](/demo) ##### Free instant security score ## How secure is your organization? Request a free cybersecurity report to discover key risks on your website, email, network, and brand. * Instant insights you can act on immediately * Hundreds of risk factors including email security, SSL, DNS health, open ports and common vulnerabilities [Free score](/instant-security-score)