Twitch accounts reportedly being hacked despite 2FA, info changed
Multiple Twitch streamers have reported that their accounts were hacked and, even more concerning, their payout methods have been modified despite 2FA protections, and the streaming platform has issued a statement on social media confirming that it is aware of the issue.
Twitch is one of the most widely used livestreaming platforms worldwide, with it being a crucial part of the income for many digital content creators. This is why many streamers secure their accounts using 2FA and other tools, and those tools are often considered by their users to be foolproof.
But multiple reports have started coming in about Twitch accounts being compromised and payment methods being redirected to unknown sources, causing much distress among content creators and general Twitch users about whether their accounts and any related streaming income is still safe.
Streamers say Twitch accounts hacked despite using 2FA, payment methods changed
Several content creators have reported across social media that their Twitch accounts were accessed by malicious actors who modified their payment methods despite those streamers using additional security protocols such as two-factor authentication (2FA).
Multiple Twitch streamers posted that they were facing an issue where they received an email notification of their payout method being changed, or that they noticed it by manually accessing their payment settings themselves. Most of the affected streamers stated they were using 2FA, but still didn’t receive any prompts or login notifications before the payout methods were changed.
This created panic among streamers, and Twitch was quick to post that it knows of the issue and is attempting to resolve it. That alone offered little comfort to the platform’s users, however, who were still questioning how their accounts had been hacked despite 2FA protections being place.
Image credit: Twitch
Twitch later made updates to its Cookie Notice that are now publicly available, but these changes do not directly affect account security even though they make reference to a potential issue. That issue being that, if a user logs in on a third-party app or public device and doesn’t sign out, the platform implies that those users are potentially put at risk by their remaining logged in until the session expires.
Some top Twitch streamers have also reported that the platform doesn’t use 2FA when payout methods are changed. This would be a significant oversight if payment methods could be updated while bypassing 2FA account protections, as payment methodology would be one of the most important aspects of a Twitch user’s account to protect from being hacked.
While many are surprised about some Twitch accounts being compromised despite the usage of 2FA, this isn’t necessarily a new issue for Twitch. The platform previously faced a similar problem in 2021, where there was a data breach that led to a leak of payment and internal data. Hackers typically target payment info and similar records made available through prior leaks that can then be misused later on, and this latest rash of hacked Twitch accounts could be just the latest example of that.
It’s important that streamers remain vigilant and keep an eye on any modifications that are made to their accounts. These recent reports show that hackers can access Twitch accounts even with 2FA enabled, highlighting the risk of misuse and the need for the platform’s users to make sure that their account details are both correct and secure.
Feature image credit: Twitch
Khizar Mundia has been playing video games for as long as he can recall. Things have come a long way since the many days he spent playing the original NES, though. He now covers a variety of competitive games and esports, as well as the world of streaming, ranging from Twitch to Kick. If it’s of interest to gamers, it’s of interest to Khizar.
View full profile