Creator Drama
Twitch 2021 Data Leak: Source Code & Streamer Pay Data Exposed
Resolved
Photo: Sora Shimazaki, Pexels All clips and posts below are embedded from their original sources.
By the numbers: this timeline documents 5 events from Oct 4, 2021 to Oct 15, 2021, drawn from 3 sources.
“The earnings list got my figure 100% correct.”
via bbc.com
Background
Twitch, owned by Amazon, is a dominant live‑streaming platform that closely guards operational details such as how much its streamers are paid. Competitors like YouTube Gaming have been offering large contracts to attract talent, raising the stakes of any internal data exposure.
In October 2021 a server misconfiguration allowed an unauthorized party to download 125GB of internal data, including source code for the website and console/client versions, references to an unreleased Steam competitor (codenamed Vapor), Vapeworld assets, and spreadsheets showing streamer earnings from August 2019 to October 2021. Twitch confirmed the breach, forced a stream‑key reset, and stated no login credentials or full credit‑card numbers were exposed.
The timeline
-
Alleged unauthorized access via server misconfiguration
Reportedly, an attacker gained access to Twitch's internal network due to a server configuration error on this date.[1]
-
Twitch acknowledges breach and says it is working with urgency
Twitch reportedly confirmed the security incident and stated it was "working with urgency" to understand the extent of the leak after a 125GB torrent appeared on 4chan.[2]
Screenshot of bbc.com, captured Oct 4, 2026. Source [2] -
Alleged stream‑key reset for all users
As a precautionary measure, Twitch reportedly forced a stream key reset for all users following the leak.[1]
-
Alleged update confirming no login credentials or full card numbers exposed
Twitch reportedly provided an update stating that no login credentials or full credit‑card numbers were exposed and attributing the breach to a server configuration error.[1]
-
Twitch contacts impacted users
Twitch says it is reportedly contacting those who have been impacted directly.[3]
Screenshot of blog.twitch.tv, captured Oct 5, 2026. Source [3]
Our read of the evidence
Partly documented. The breach acknowledgment and the notification of impacted users come from Twitch’s own blog and BBC reporting, while the details of the server misconfiguration, the stream‑key reset, and the statement that no login credentials or full card numbers were exposed are based on reports from huntress.com. No event is backed by a primary source; all five timeline points rely on secondary reports. Consequently, the evidence is only partly documented.
Our rating counts evidence, not opinions about anyone: events confirmed by a primary source (the person's own post, their official site, a court or government record) weigh most, then how many independent outlets report the story.
Frequently asked
Is the Twitch data leak resolved?
As of October 15, 2021, per blog.twitch.tv, Twitch said it was contacting impacted users directly.
What data was leaked in the Twitch breach?
The leak included source code for Twitch’s website and console/client versions, internal tools, references to an unreleased Steam competitor (codenamed Vapor), Vapeworld assets, and spreadsheets showing streamer payouts from August 2019 to October 2021.
Did the leak expose users’ login credentials or credit‑card numbers?
Twitch stated that no login credentials or full credit‑card numbers were exposed in the incident.
More related drama (4)
Sources (3)
Cite this timeline
This timeline compiles 5 dated events from 3 sources. If it helped your reporting, cite it:
GenZHype. “Twitch 2021 Data Leak: Source Code & Streamer Pay Data Exposed.”
GenZHype, 22 August 2026,
https://genzhype.com/drama/twitch-2021-data-leak-source-code-streamer-pay-data-exposed/.