In October 2021, a hacker dumped 125 gigabytes of Twitch's internal data on 4chan with the hashtag "#DoBetterTwitch." It wasn't a sophisticated attack — it was a server misconfiguration. The leak included Twitch's entire source code, internal security tools, and an unreleased Steam competitor codenamed "Vapor." Evidence from a 2014 breach — right after Amazon bought Twitch — was still visible, suggesting Twitch never fully cleaned up from the first hack. The attacker called it "part one." Amazon's response: "we're confident no credentials were exposed." The source code was. The 2021 Twitch leak exposed exactly how much every single creator earned. CriticalRole: $9.6 million. xQc: $8.4 million. Summit1g: $5.8 million. But it wasn't just the millionaires — small creators making $200 a month had their income published alongside the top earners. The exposure triggered harassment campaigns, doxxing attempts, and stalking fears. Twitch's privacy policy promised creator financial data was confidential. A single server misconfiguration turned every streamer's bank statement into a 4chan post. Amazon, a $1.7 trillion company, couldn't configure a server correctly.
What they claim: Twitch operates as an independent platform with its own data practices.
What we found: Amazon acquired Twitch for $970 million in 2014 and progressively integrated it into Amazon's ad infrastructure. Amazon DSP sells Twitch ad inventory based on Amazon purchase history, search history, and browsing. Twitch viewing feeds back into Amazon's advertising profiles across shopping and entertainment.
What they claim: Twitch claims to protect creator and user data with appropriate security measures.
What we found: In October 2021, a hacker leaked 125GB of Twitch internal data on 4chan tagged #DoBetterTwitch. Included entire source code, internal security tools, unreleased competitor codenamed Vapor, creator payouts back to 2019. Caused by a server misconfiguration. Evidence of the 2014 breach was still visible — Twitch never fully cleaned up from the first hack.
What they claim: Twitch states that creator financial information is confidential and protected.
What we found: The 2021 breach exposed exact payout figures for every creator back to August 2019. CriticalRole: $9.6 million. xQc: $8.4 million. Summit1g: $5.8 million. Small creators making $200/month also exposed. Led to targeted harassment, doxxing, and stalking concerns.
What they claim: Twitch provides a safe community for streamers and viewers.
What we found: In 2021, Twitch faced an epidemic of hate raids — coordinated bot attacks flooding Black, LGBTQ+, and marginalized streamers' chats with racist and threatening messages. Streamers RekItRaven, ShineyPen, and LuciaEverBlack organized #ADayOffTwitch. A class-action lawsuit was filed. Twitch didn't implement basic anti-raid tools for months.
What they claim: Twitch supports creators and provides fair compensation for content.
What we found: Twitch takes 50% of most streamers' $4.99 subscriptions. In 2022, even top partners' 70/30 deals reverted to 50/50 after $100,000. YouTube offers all creators 70/30. Kick offers 95/5. Amazon made $469.8 billion in 2021. Jeff Bezos worth $150B+.
What they claim: Twitch enforces copyright policy fairly and provides DMCA compliance tools.
What we found: In late 2020, Twitch sent mass DMCA takedowns for clips with background music dating back years. No tools to identify violations. Creators told to mass-delete clip libraries or risk bans. VP DJ Wheat admitted failure to build proper tools. Music labels, not Twitch, decided who got banned.
What they claim: Twitch protects account security with two-factor authentication.
What we found: In 2026, multiple reports of accounts hijacked despite 2FA enabled. Attackers changed emails and passwords bypassing 2FA entirely. Creators lost access to channels, subscribers, and revenue. Recovery process took weeks, with some creators losing their income source.