Twitch hacked

[Xed]

tldr - Passwords possibly taken in clear text and personal information taken.

"We are writing to let you know that there may have been unauthorized access to some of your Twitch user account information, including possibly your Twitch username and associated email address, your password, the last IP address you logged in from, and any of the following if you provided it to us: first and last name, phone number, address, and date of birth. While we store passwords in a cryptographically protected form, we believe it’s possible that your password could have been captured in clear text by malicious code when you logged into our site on March 3rd.

For your protection, we have expired your password and stream keys. In addition, if you had connected your account to Twitter or YouTube, we have terminated this connection.

You will be prompted to create a new password the next time you attempt to log into your Twitch account. If applicable, you will also need to re-connect your account to Twitter and YouTube, and re-authenticate through Facebook, once you change your password. We also recommend that you change your password at any other website where you use the same or a similar password.

We apologize for this inconvenience.

 

[Dahak]

/Rant On

tldr - Passwords in clear text and personal information taken.

Why the hell is this still happening. clear text ... really... at least do something even if it is some basic encryption

We apologize for this inconvenience.

Oh sure they are..... can't take 5 minutes to put in some stupid encryption.

/rant off.

Sorry but this is just getting out of hand, I could see this a few years ago but after the last few.

 

[Jodell88]

The OP and the poster above me need to read.

While we store passwords in a cryptographically protected form, we believe it’s possible that your password could have been captured in clear text by malicious code when you logged into our site on March 3rd

NoScript FTW!

 

[natto fire]

Is twitch the service for people who are too lazy to play a game, or debate which graphics card is best for a game? Forgive my ignorance, but I have very little spare time, and never understood how there are so many subcultures beneath actually playing games.

 

[Dahak]

I'll admit I did not read it fully, and only read the tl:dr
but still almost every time I hear about a hack / breach I am like.... really... again... does not anyone learn...

 

[Aikouka]

I don't care much about the password part as I use a password manager for all of that. However, I do care that someone may have personal information about me. With all those loons out there doxing people "for the lulz", do you think I really want my information potentially floating around out there? :\

 

[Newbian]

Is twitch the service for people who are too lazy to play a game, or debate which graphics card is best for a game? Forgive my ignorance, but I have very little spare time, and never understood how there are so many subcultures beneath actually playing games.

It's like youtube for people to watch other people play games but live streams usually and you can chat with the people playing and ask them questions so they can ignore the game they are playing and chat with you instead.

 

[SashaJen]

Hey guys, just registered so I can reply to this post.

I have also gotten the same email about my personal details and password potentially being stolen. Honestly however, I don't care much fir the password, passwords ar easy to change.

To more of an extent I care about the personal information, but what I REALLY am worried about is that I was subscribed to twitch streamers, thus my credit card was linked to my account.

The email did not even acknowledge this, it only said "change password bye!" Now I'm sitting here biting my nails if my CC info and money will be stolen. The fact that the email did not say a thing about this just makes me angry.

Should I contact twitch support and inquire about my CC info possibly being stolen? Maybe CC has extra security on twitch and it is not possible that it was stolen. Or should I not waste time and contact my bank to cancel my card? Those and several other questions are going around in my worried head right now.

I want to punch twitch in the face right now, if CC info is safe it should say that in the email. If it is possible that it is stolen it should say that in the email at a higher priority that password. Again, all the email says is "we were hacked your info stolen reset password k bye". Sounds like they don't want to admit responsibility and sort it out indeed.

 

[PrincessFrosty]

The OP and the poster above me need to read. NoScript FTW!

Sounds like someone found a cross site scripting attack on the site, no amount of encryption can help you then.

 

[xantub]

Is twitch the service for people who are too lazy to play a game, or debate which graphics card is best for a game? Forgive my ignorance, but I have very little spare time, and never understood how there are so many subcultures beneath actually playing games.

- You may start because you are curious about a game. You can watch a youtube video of a game, but in Twitch it's more interactive, you are in a chat in real time with the player, so you can ask questions, etc.
- You may then want to watch the person playing other games because of his commentaries. It may be because he/she is funny, or very knowledgeable about the game, etc. so you start following the user.
- Eventually when you watch the same person regularly, participating in the chat with others that also like to watch the same person, a feeling of 'hive' may develop, so you start watching more because of the people watching, a group-mentality, sort of like being in a guild in some MMOs.

 

[Aikouka]

To more of an extent I care about the personal information, but what I REALLY am worried about is that I was subscribed to twitch streamers, thus my credit card was linked to my account.

The email did not even acknowledge this, it only said "change password bye!" Now I'm sitting here biting my nails if my CC info and money will be stolen. The fact that the email did not say a thing about this just makes me angry.

It did talk about credit card information:

We are writing to let you know that there may have been unauthorized access to some of your Twitch user account information, including possibly your Twitch username and associated email address, your password (which was cryptographically protected), the last IP address you logged in from, limited credit card information (card type, truncated card number and expiration date), and any of the following if you provided it to us: first and last name, phone number, address, and date of birth. PLEASE NOTE: Twitch does not store or process full credit or debit card information, so your card number is safe.

What I was worried about is that you normally have to provide a billing address when you give your credit card, and I wasn't sure if that's what they mean when they talk about first and last name, or if that's just for people like Partnered streamers that Twitch pays.