Twitch, the immensely popular livestreaming service for gamers that was acquired last year by Amazon in a nearly $1 billion deal, confirmed today that it has suffered a security breach that may have resulted in unauthorized access to a number of user accounts. The company is now forcing all of its users to change their passwords.
“We are writing to let you know that there may have been unauthorized access to some Twitch user account information.
For your protection, we have expired passwords and stream keys and have disconnected accounts from Twitter and YouTube. As a result, you will be prompted to create a new password the next time you attempt to log into your Twitch account.
We also recommend that you change your password at any website where you use the same or a similar password. We will communicate directly with affected users with additional details.
And here is the email Twitch sent to users that may have been affected by the hack:
“We are writing to let you know that there may have been unauthorized access to some of your Twitch user account information, including possibly your Twitch username and associated email address, your password (which was cryptographically protected), the last IP address you logged in from, and any of the following if you provided it to us: first and last name, phone number, address, and date of birth.
For your protection, we have expired your password and stream keys. In addition, if you had connected your account to Twitter or YouTube, we have terminated this connection.
You will be prompted to create a new password the next time you attempt to log into your Twitch account. If applicable, you will also need to re-connect your account to Twitter and YouTube, and re-authenticate through Facebook, once you change your password. We also recommend that you change your password at any other website where you use the same or a similar password.
We apologize for this inconvenience.
The Twitch Team”
Twitch is a hugely popular site — it is reportedly the fourth largest site on the Internet in terms of peak traffic, bested only by Netflix, Apple, and Google — so a hack could potentially have a negative impact on a large number of people.
When reached today by email, a Twitch spokesperson declined to provide additional comment on the breach or details on how many accounts were compromised. We’ll report back with any additional information that we hear.