Twitch has started informing users of its service that accounts may have been compromised including username, email, IP and any personal information like name, phone number and address.
The note hasn’t said when this occurred or who they believe responsible but they have mentioned that all accounts have had the password reset and will need to be re-set on next login. Also, any connection between Twitch and other social channels like Twitter and YouTube have been terminated and will need to be re-established.
The notice reads:
We are writing to let you know that there may have been unauthorized access to some of your Twitch user account information, including possibly your Twitch username and associated email address, your password, the last IP address you logged in from, and any of the following if you provided it to us: first and last name, phone number, address, and date of birth. While we store passwords in a cryptographically protected form, we believe it’s possible that your password could have been captured in clear text by malicious code when you logged into our site on March 3rd.
For your protection, we have expired your password and stream keys. In addition, if you had connected your account to Twitter or YouTube, we have terminated this connection.
You will be prompted to create a new password the next time you attempt to log into your Twitch account. If applicable, you will also need to re-connect your account to Twitter and YouTube, and re-authenticate through Facebook, once you change your password. We also recommend that you change your password at any other website where you use the same or a similar password.
We apologize for this inconvenience.
The Twitch Team
You can also read about the breach at http://blog.twitch.tv/2015/03/important-notice-about-your-twitch-account/