Twitch accounts were compromised, passwords for all users reset

Uh oh, game streaming service Twitch has posted a short notice to its blog warning that there “may have been” some unauthorized access to some Twitch user information.

It says that affected users will be contacted directly with additional details. We got the email being sent out to those users which says that a wide variety of information, including usernames, birthdate and home address, “may” have been accessed in the attack:

We are writing to let you know that there may have been unauthorized access to some of your Twitch user account information, including possibly your Twitch username and associated email address, your password (which was cryptographically protected), the last IP address you logged in from, and any of the following if you provided them to us: first and last name, phone number, address, and date of birth.

For your protection, we have expired your password and stream keys. In addition, if you had connected your account to Twitter or YouTube, we have terminated this connection.

You will be prompted to create a new password the next time you attempt to log into your Twitch account. If applicable, you will also need to re-connect your account to Twitter and YouTube, and re-authenticate through Facebook, once you change your password. We also recommend that you change your password at any other website where you use the same or a similar password.

We apologize for this inconvenience.

The Twitch Team

The company says all passwords have been reset along with stream keys. It has also disconnected accounts from both Twitter and YouTube. Everyone that uses the service will see the below password reset screen when they next log in.

We’ve reached out to Twitch for comment and will update when we hear back.

➤ Important notice about your Twitch account [Twitch blog]