Creator Drama
Twitch 2021 Data Leak: Source Code, Payouts Exposed
Resolved
Photo: Sora Shimazaki, Pexels All clips and posts below are embedded from their original sources.
By the numbers: this timeline documents 9 events from Oct 4, 2021 to Oct 15, 2021, drawn from 3 sources.
“suggesting more data could be released. The post included the hashtag”
via huntress.com
Background
Twitch, the Amazon-owned live-streaming platform, hosts millions of creators and guards operational details such as streamer payouts and internal product roadmaps. The platform’s prominence in gaming culture made any exposure of its internal data a significant event for both the company and its community.
In early October 2021, a server configuration error inadvertently exposed Twitch’s internal network, allowing an unauthorized actor to download a 125GB torrent of proprietary information. The leak quickly spread across forums and social media, revealing source code, financial data, and hints at unreleased projects.
The timeline
-
Attacker gains access via server misconfiguration
An unauthorized third party reportedly accessed Twitch's internal network due to a server configuration change that appears to have created an opening for data exfiltration.[1973]
-
125GB leak posted on 4chan
The attacker reportedly released a 125GB torrent file allegedly containing Twitch source code, internal security tools, creator payout data, and references to unreleased projects such as the Steam competitor Vapor and the Vapeworld VR chat prototype.[1973]
-
Twitch acknowledges breach publicly
Twitch reportedly confirmed the security incident on social media, stating it was "working with urgency" to understand the extent of the leak and would update the community as more information became available.[1974]
-
BBC reports on leaked creator earnings
BBC News detailed the leak, noting that the earnings list appeared accurate according to streamers such as BBG Calc, xQC, Summit1g, and the CriticalRole channel, and that the data included internal metadata folders like "core config packages" and "infosec".[1974]
-
Twitch forces stream key reset
As a precautionary measure, Twitch reportedly reset the stream keys for all users to prevent potential misuse of leaked streaming credentials.[1973]
-
Sinoc tweets about leak contents and risks
Twitter user Sinoc reportedly described the leaked material, including source code with comments, payout information, encrypted passwords, references to Vapor and Vapeworld, and warned that raiding bots could exploit the leak.[1970]
-
Twitch provides breach update
Twitch reportedly confirmed that no login credentials or full credit card numbers were exposed, attributing the breach to a server configuration error and noting that the investigation was ongoing.[1973]
-
Leak reveals details of Vapor and Vapeworld
The leaked data reportedly included references to Amazon’s Steam competitor codenamed Vapor, Unity code for a game called Vapeworld, and associated 3D emote assets, appearing to indicate internal work on a potential rival platform.[1970]
-
Warning about potential raiding bot abuse
Sinoc cautioned that the allegedly leaked information could be dangerous if raiding bots took advantage of the exposed data to harass streamers.[1970]
Frequently asked
What caused the Twitch data leak?
The leak resulted from a server configuration error that inadvertently exposed Twitch’s internal network, allowing unauthorized access and exfiltration of 125GB of data.
Was any personal user data such as passwords or credit card numbers leaked?
Twitch stated that no login credentials or full credit card numbers were exposed in the breach.
Did the leak include information about Twitch’s internal projects?
Yes, the leaked files contained references to an unreleased Steam competitor called Vapor and a VR chat prototype named Vapeworld, along with related source code and assets.
Related drama
Sources
- twitter.com, Sinoc on X: "https://t.co/7vTDeRA9vt got leaked. Like, the entire website; Source code with comments for the website and various console/phone versions, refrences to an unreleased steam competitor, pa, Aug 21, 2026.
- huntress.com, In October 2021, the live-streaming giant Twitch was hit by a massive data breach that sent shockwaves through the gaming and creator communities. An anonymous actor leaked a colossal 125GB torrent fi, Aug 21, 2026.
- bbc.com, 6 October 2021Joe Tidy & David MolloyBBC NewsGetty ImagesGame-streaming platform Twitch has been the victim of a leak, reportedly divulging confidential company information and streamers' earnings.Mor, Aug 21, 2026.
Cite this timeline
This timeline compiles 9 dated events from 3 sources. If it helped your reporting, cite it:
GenZHype. “Twitch 2021 Data Leak: Source Code, Payouts Exposed.”
GenZHype, 4 September 2026,
https://genzhype.com/drama/twitch-2021-data-leak-source-code-payouts-exposed/.