PHP Vulnerability Responses by Company

Twitch Interactive, Inc.

Companies / web services
Aliases / services
Twitch / ツイッチ / Twitch Interactive, Inc.
Official website
https://www.twitch.tv/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Twitch streaming and creator payout information

Response status
Not listed
Response information checked
2026-10-30

Current re-audit: Related incident verified; PHP connection not stated · Research date: 2026-10-30

Update dated October 15, 2021: Unauthorized access following a server configuration change exposed source code and some creator payout information. Twitch stated passwords were not exposed and full card and banking information were excluded.

Scope: A PHP connection and response to the current PHP vulnerabilities are not listed.

What users should do

All stream keys were reset at the time. The notice instructs users of unlinked OBS or similar setups to replace the old key with the new one from their dashboard.

Official service URL

Source URLs

  1. Official operator evidencehttps://legal.twitch.com/en/legal/terms-of-service/Service and operation documentation
  2. 2021-10-15 official noticehttps://blog.twitch.tv/en/2021/10/15/updates-on-the-twitch-security-incident/Service and operation documentation
Related official sources
  1. Official operator evidenceOfficial information directoryIdentifies Twitch Interactive, Inc. and the relevant scope.
  2. 2021-10-15 official noticeOfficial notice; link to this PHP incident unconfirmedConfirms incident scope and guidance for affected people.

Comments