Gaming-focused video streaming service Twitch sent a mass e-mail to users earlier today stating that some accounts may have been compromised in a recent hack. From the e-mail:
We are writing to let you know that there may have been unauthorized access to some of your Twitch user account information, including possibly your Twitch username and associated email address, your password (which was cryptographically protected), the last IP address you logged in from, and any of the following if you provided it to us: first and last name, phone number, address, and date of birth.
The message goes on to say that Twitch has “expired” users’ passwords and stream keys and that users will be prompted to create new passwords (and possibly re-authenticate their accounts thru Facebook) upon their next login to the site. Twitch also terminated connections between user accounts and external sites like Twitter and YouTube. Users will have to reestablish those connections if they want to continue to use them.
In the wake of this security breach, Twitch may have changed its password requirements, forcing users to make more complex passwords. Responding to complaints from users, the company lessened the requirements but still advised users on best practices for creating secure passwords.