Ethical Hacking News
StreamElements, a popular cloud-based streaming tools platform used by millions of content creators on Twitch and YouTube, has recently disclosed a third-party data breach after a hacker leaked samples of stolen customer information. The breach occurred at a third-party service provider that StreamElements stopped working with last year, but the company claims no servers were breached. Users are advised to be vigilant for potential phishing and scamming attempts.
StreamElements experienced a third-party data breach after a hacker leaked samples of stolen customer information on a hacking forum.The breach occurred at a service provider StreamElements stopped working with last year, but no StreamElements servers were breached.Over 210,000 StreamElements customers' personal data was exposed, including full names, addresses, phone numbers, and email addresses.StreamElements is actively reaching out to affected customers and taking steps to assess and address the impact of the breach.The incident highlights the importance of data security in today's digital age and serves as a reminder for businesses and individuals to prioritize data protection.
StreamElements, a cloud-based streaming company used primarily by content creators on Twitch and YouTube, has recently disclosed a third-party data breach after a hacker leaked samples of stolen customer information on a hacking forum.
The breach occurred at a third-party service provider that StreamElements stopped working with last year. According to the company's statement, no StreamElements servers were breached during the incident. However, the older data stored by the platform at this third-party provider was still exposed.
The hacker, who went by the nickname "victim," claimed to have stolen the data of 210,000 StreamElements customers on March 20, 2025. The leaked samples included full names, addresses, phone numbers, and email addresses.
In a statement released on the platform's Twitter account, StreamElements confirmed the breach and assured its users that it was taking steps to assess and address the impact. The company has been actively reaching out to affected customers to provide them with further information.
The incident highlights the importance of data security in today's digital age. With more and more businesses moving their operations online, the risk of data breaches is increasing exponentially. StreamElements' proactive response to the breach demonstrates its commitment to protecting its customers' sensitive information.
Zach Bussey, a Twitch-focused journalist and streaming commentator, reported that someone linked to the hacking group contacted him and provided evidence that confirmed the authenticity of the leaked data. Bussey also claimed to have verified the legitimacy of his own personal details by requesting them from orders placed in 2021 or 2022.
The same hacker breached a StreamElements employee via an information-stealing malware infection, which allowed it to take over an internal account and access the platform's order management system. The hacker then stole data from this system, which consisted of user information from 2020 until 2024.
Although the details of the breach have not been officially validated by StreamElements, users registered with the service between these dates are advised to be extra vigilant for potential phishing and scamming attempts. As part of its response to the breach, the platform has alerted the community about phishing attacks taking advantage of the security incident to trick recipients with fake "data breach" emails.
As of yet, StreamElements has not started sending data breach notifications to impacted users, but it noted that an investigation is currently underway. The incident serves as a reminder for all businesses and individuals to prioritize data security and take proactive measures to protect their sensitive information.
Related Information:
https://www.ethicalhackingnews.com/articles/StreamElements-Exposes-Third-Party-Data-Breach-After-Hacker-Leaks-Sensitive-Customer-Information-ehn.shtml
https://www.bleepingcomputer.com/news/security/streamelements-discloses-third-party-data-breach-after-hacker-leaks-data/
https://deltiasgaming.com/streamelements-alleged-data-breach-everything-you-need-to-know/
Published: Wed Mar 26 14:49:03 2025 by llama3.2 3B Q4_K_M