|
Hello i just receive this in my e-mail from no-reply@twitch.tv
We are writing to let you know that there may have been unauthorized access to some of your Twitch user account information, including possibly your Twitch username and associated email address, your password (which was cryptographically protected), the last IP address you logged in from, limited credit card information (card type, truncated card number and expiration date), and any of the following if you provided it to us: first and last name, phone number, address, and date of birth.
PLEASE NOTE: Twitch does not store or process full credit or debit card information, so your card number is safe.
For your protection, we have expired your password and stream keys. In addition, if you had connected your account to Twitter or YouTube, we have terminated this connection.
You will be prompted to create a new password the next time you attempt to log into your Twitch account. If applicable, you will also need to re-connect your account to Twitter and YouTube, and re-authenticate through Facebook, once you change your password. We also recommend that you change your password at any other website where you use the same or a similar password.
We apologize for this inconvenience.
The Twitch Team
So... Twitch been hacked and get robbed from all of my informations ? It would be nice if recent company INVEST IN SECURITY.
It's like you go to the pool and you got robbed from your clothes in your locker because the keys were stolen by the pool. And they're like : "oops". But hey ! we got you a new key !
|
I experienced the same.Luckily I use very basic and throwaway acc/pass on twitch, as I only watch streams and don't pay for anything.
|
Northern Ireland22208 Posts
i am devastated by this, im not sure how my 18 follower stream will deal with it
|
On March 24 2015 18:16 ahswtini wrote:
i am devastated by this, im not sure how my 18 follower stream will deal with it
You missed the point. I don't stream. I'm just amazed that they still get infromations "robbed".
|
ALLEYCAT BLUES50104 Posts
|
|
|
Northern Ireland22208 Posts
On March 24 2015 18:24 FFW_Rude wrote:Show nested quote +On March 24 2015 18:16 ahswtini wrote:
i am devastated by this, im not sure how my 18 follower stream will deal with it You missed the point. I don't stream. I'm just amazed that they still get infromations "robbed".
i know, i wasnt trying to downplay how troubling this is for the bigger streamers and those who use twitch a lot
|
|
|
I've gotta say I was kinda shocked when I read this mail in my inbox and I instantly changed all my passwords.
When I read that almost everybody had received this mail, it made me a whole lot less stressed ^^
In the end it is still the internet and you should keep a good eye on where you personal information goes.
I hope nobody lost their account, personal info or worse because of this incident.
|
On March 24 2015 20:00 Nesserev wrote:Show nested quote +On March 24 2015 17:49 FFW_Rude wrote:
So... Twitch been hacked and get robbed from all of my informations ? It would be nice if recent company INVEST IN SECURITY. Well, if you would have invested any time in computer security (not that I expect this of anyone), you would know that it's almost 100% impossible to make sure that everything is secure. Every framework, piece of functionality, etc. is a possible attack vector for any hacker; so it might not even be Twitch's fault. EDIT: Be glad that they were able to detect it and warn you about it. There are companies that keep this kind of stuff hidden, or worse, aren't even aware of this stuff happening.
it's the second time twitch had a major security breach like this non bueno
|
your Country52797 Posts
I just got this email a few minutes ago even though I changed my password yesterday >.>
|
On March 24 2015 18:24 FFW_Rude wrote:Show nested quote +On March 24 2015 18:16 ahswtini wrote:
i am devastated by this, im not sure how my 18 follower stream will deal with it You missed the point. I don't stream. I'm just amazed that they still get infromations "robbed".
The fight against evil wizards is a never ending battle, and is exacerbated by clients who want cool new features but don't understand that they open up new vulnerabilities, and consumers who want to use the latest coolest gadgets and put pressure on aforementioned clients to provide such a service.
Twitch is big enough that they are a real target for hackers. It doesn't mean Twitch is super incompetent. Name number address etc that you may have had on Twitch are usually considered low risk details, and apart from Twitch you've likely had that information compromised countless times, if not just by your local phone directories. This will probably prompt Twitch to spend more money on security specialists, which before might have been a task burdened to more generalized coders.
This is pretty tame compared to all the times in the past 10 years companies had their user's credit cards compromised.
|
Odd they don't mention twitch and steam linked being a concern... (maybe it's only on steam's side, don't recall).
|
Northern Ireland22208 Posts
On March 25 2015 07:28 y0su wrote:
Odd they don't mention twitch and steam linked being a concern... (maybe it's only on steam's side, don't recall).
i don't know twitch and steam linking works, but when you authenticate on other websites via steam (like those trading sites etc..) none of your private steam details are given to those websites, only a unique identifier number
|
Papua New Guinea1058 Posts
Wonder if Twitch is even PCI Compliant.
|
On March 24 2015 20:00 Nesserev wrote:Show nested quote +On March 24 2015 17:49 FFW_Rude wrote:
So... Twitch been hacked and get robbed from all of my informations ? It would be nice if recent company INVEST IN SECURITY. Well, if you would have invested any time in computer security (not that I expect this of anyone), you would know that it's almost 100% impossible to make sure that everything is secure. Every framework, piece of functionality, etc. is a possible attack vector for any hacker; so it might not even be Twitch's fault. EDIT: Be glad that they were able to detect it and warn you about it. There are companies that keep this kind of stuff hidden, or worse, aren't even aware of this stuff happening.
I'm a programmer (not a security expert that's right), so i know it's hard. But man... This things are happening a lot in every major company. I would really love them to have incresead their security. But it's like they are just plugging the hole and wait for the next.
Yes this time it's minor information. But what about next time ? It's not just twitch, it's everything. I really hope some companies "merge" a team dedicated to internet security (maybe it already exists). Because in years we will have SO MUCH MORE stuff on the internet.
|
Well it is a never ending battle and you can only do your best before someone will figure out some new way to get into the security system. By nature security systems can only be so proactive as they can only shore up their defenses against known methods and possibly try to predict new ways but it seems like its mostly reactionary since hackers have all the time in the world to sit back, analyze, and come up with new ways to steal information.
|
|
|
|
|
|
|
|
EPT
