Creator Drama

By Deimos EMK · Published Aug 23, 2026 · 6 min read · AI-drafted, source-checked

Photo: Ann H, Pexels All clips and posts below are embedded from their original sources.

By the numbers: this timeline documents 10 events from Sep 1, 2021 to Oct 22, 2021, drawn from 5 sources.

“The earnings list got my figure 100% correct.”

via bbc.com

Background

Twitch, the Amazon-owned live-streaming giant, has historically maintained a strict policy of secrecy regarding its operational details, specifically the exact amounts paid to its top creators. This lack of transparency occurred during a period of intense competition in the gaming industry, as rival platforms like YouTube Gaming were reportedly offering substantial salaries to attract high-profile gaming talent away from Twitch.

This competitive environment amplified the impact of any financial disclosures, as payout data could be used as leverage in contract negotiations or to shift the balance of power between creators and the platform.

The technical scope of the breach was immense, involving the exfiltration of a 125GB torrent file. This trove of data was not limited to financial records but included the platform's proprietary source code, internal security tools, and various SDKs. The leak also extended to other Twitch-owned properties, including the game database IGDB and the modding platform CurseForge.

The breach provided a rare, unauthorized glimpse into the internal AWS services and the core configuration packages that power the site's infrastructure, including developer tools and information security folders.

The breach occurred against a backdrop of community unrest.

In early September 2021, Twitch creators participated in a boycott titled 'a day off Twitch,' which served as a strike to protest the platform's perceived lack of action regarding 'hate raids.' This atmosphere of friction between the creator community and the corporate entity provided a potential motive for the attacker, who later framed the leak as an act of hacktivism intended to disrupt the platform and foster more competition in the video streaming market.

The timeline

1. Sep 1, 2021

   Creators launch 'a day off Twitch' boycott

   In early September, a significant number of creators reportedly organized a strike known as 'a day off Twitch.' This boycott was allegedly a direct protest against Twitch's handling of hate raids, with creators reportedly demanding more robust action to protect streamers from coordinated harassment campaigns. This event appeared to highlight the growing tension between the platform's administration and its most prominent users shortly before the data breach occurred.[3]

   

2. Oct 4, 2021

   Unauthorized access to Twitch internal network

   An anonymous threat actor successfully gained access to Twitch's internal network. According to later investigations, this access was not the result of a sophisticated hack or the use of malware, but was instead caused by a server configuration change. This human error in the cloud environment inadvertently exposed internal data, creating a vulnerability that allowed the unauthorized third party to exfiltrate a massive amount of proprietary information.[2]

3. Oct 5, 2021

   Twitch attributes breach to server configuration error

   Twitch posted an advisory blaming the data exposure on a "server configuration change that was subsequently accessed by a malicious third party," according to Ars Technica.[4]

   

4. Oct 5, 2021

   Leaker posts Twitch internal data

   A leaker posted a cache of source code and internal data on Tuesday, according to TechCrunch.[5]

   

5. Oct 6, 2021

   125GB torrent file leaked on 4chan

   The attacker publicly disclosed the breach by posting a 125GB torrent file on the 4chan messaging board. The leak was labeled as 'part one,' suggesting that additional data might be released in the future. The poster used the hashtag '#DoBetterTwitch' and described the Twitch community as a 'disgusting toxic cesspool,' claiming the motivation for the leak was to foster more disruption and competition within the streaming industry. The leaked data included the website's source code, creator payout information, and internal security tools.[2]

6. Oct 6, 2021

   Twitch acknowledges security incident

   Following the 4chan post, Twitch officially confirmed the security breach via social media. The company stated that it was 'working with urgency' to determine the full extent of the leak and promised to update the community as more information became available. This acknowledgment came as reports began to circulate that the leaked documents contained the earnings of top streamers, some of whom reportedly made millions of dollars over a two-year period.[2]

7. Oct 6, 2021

   Streamers verify accuracy of leaked payout data

   As the leaked payout lists circulated, some creators began to verify the data. Fortnite streamer BBG Calc told BBC News that the earnings figure listed for them was '100% correct.' Another streamer confirmed their figures were 'accurate,' and a third person associated with a high-profile player described the details as being 'about right.' The documents reportedly listed payments from August or September 2019 through October 2021, naming top earners such as xQC, Summit1g, and the CriticalRole channel.[3]

8. Oct 7, 2021

   Twitch mandates stream key resets

   As a precautionary security measure in response to the breach, Twitch reportedly forced a stream key reset for all users on the platform. This action was reportedly taken to ensure that any potentially compromised stream keys—which allow a user to broadcast to their channel—were invalidated, preventing unauthorized parties from hijacking streams.[2]

9. Oct 15, 2021

   Twitch provides update on exposed data

   Twitch issued a follow-up update reportedly confirming that the breach was caused by a server configuration error. The company specifically clarified that no full credit card numbers or login credentials had reportedly been exposed in the leak. The investigation reportedly detailed that the exfiltrated 125GB included source code for the Twitch client, proprietary SDKs, and data from internal AWS services, as well as data from IGDB and CurseForge.[2]

10. Oct 22, 2021

    Reports of unreleased 'Vapor' project emerge

    Following the leak, users analyzing the data reported the discovery of a project codenamed 'Vapor,' which is alleged to be Amazon's competitor to Steam. This project reportedly integrates various Twitch features and includes game-specific support for titles like PUBG and Fortnite. Additionally, the leak allegedly contained Unity code for a project called 'Vapeworld,' described as a potential VR chat-style experience, including 3D emotes with specular and albedo maps and custom Unity plugins for developers.[1]

    https://t.co/7vTDeRA9vt got leaked. Like, the entire website; Source code with comments for the website and various console/phone versions, refrences to an unreleased steam competitor, payouts, encrypted passwords that kinda thing. Might wana change your passwords.

    — Sinoc (@Sinoc229) Oct 6, 2021

Our read of the evidence

Partly documented. All information about the breach comes from secondary reports; no primary source has confirmed the details. The accounts are drawn from several different outlets, but none are verified directly. Therefore the claim is only partly documented.

Our rating counts evidence, not opinions about anyone: events confirmed by a primary source (the person's own post, their official site, a court or government record) weigh most, then how many independent outlets report the story.

Frequently asked