Hacker sells 40,000 Twitch streamers' personal data on the dark web, raising major phishing and security concerns.
A new cybersecurity scare is putting content creators on high alert after a hacker claimed to have stolen and put up for sale the personal information of roughly 40,000 Twitch streamers on the dark web. The compromised database allegedly contains Twitch usernames, email addresses, and in some cases, real names. According to an investigation by Cybernews, security researchers suspect that a large portion of this data was obtained via automated "data scraping," a process where automated scripts systematically browse public web pages to compile visible information. However, because this specific leak also includes private email addresses, it indicates that the perpetrator likely went beyond basic scraping, exploiting Twitch APIs or OAuth tokens to bypass privacy settings.
Double Jeopardy: How the Twitch Leak Collided with Discord
By organizing these extracted details into a single database, the hacker has essentially created a highly structured target list for malicious actors. This compilation raises immediate concerns over targeted phishing campaigns, doxing, and account takeovers aimed specifically at content creators. The threat actor behind the listing has actively used the data to cause a stir within underground forums, leveraging the livestreaming community's massive public footprint. However, the anxiety surrounding this leak has been heavily amplified by its timing, overlapping directly with an even larger disruption in the streaming ecosystem's primary communication hub: Discord.
Only weeks after news of the Twitch breach broke, a massive, independent security crisis crippled Double Counter, a widely used Discord verification bot. Attackers successfully hijacked the bot’s token, using it to spam malicious links and compromising the data of up to 28 million accounts. Because almost all major Twitch streamers run dedicated Discord servers to manage their fanbases, the parallel incidents effectively left the streaming community facing an immediate, two-front security crisis across both of their most vital digital platforms.
Have you noticed an uptick in suspicious messages lately? Let us know how you are securing your accounts and share your thoughts in the comments section below!
