Published on March 24th, 2015 | by Patrick Doyle0
Twitch Resets User Passwords After Possible Breach
Twitch has reset the passwords of all its users following a possible security breach. When you try to login on the site, you’ll be prompted with a message saying that a link to set a new password has been sent to the email address associated with your account.
Connections to external sites like Facebook, YouTube and Twitter have also been reset and will need to be reactivated by users.
The list of potential data obtained (see below) by hackers is pretty damning to say the least. While passwords were encrypted, it doesn’t seem that any of the other information was.
We are writing to let you know that there may have been unauthorized access to some of your Twitch user account information, including possibly your Twitch username and associated email address, your password (which was cryptographically protected), the last IP address you logged in from, and any of the following if you provided it to us: first and last name, phone number, address, and date of birth.
For your protection, we have expired your password and stream keys. In addition, if you had connected your account to Twitter or YouTube, we have terminated this connection.
You will be prompted to create a new password the next time you attempt to log into your Twitch account. If applicable, you will also need to re-connect your account to Twitter and YouTube, and re-authenticate through Facebook, once you change your password. We also recommend that you change your password at any other website where you use the same or a similar password.
We apologize for this inconvenience.
The Twitch Team