I got an email from Twitch that there was a login to my account

[The Artisan]

I got an email at like half passed 5 in the morning today that there was a successful login to my twitch account all the way in Los Angeles, and I'm in New York.

First of all, I literally never use twitch. And second of all, what the fuck? So I log into twitch myself for the first time just to change my password, enable 2 step verification and then I say to myself, fuck it I never even use it so I disabled it.

Has this ever happened to anyone else?

 

[Kewlmyc]

Yes. It happened with Netflix as well. Just change passwords and sign up for 2 step verification. It's getting easier for anyone to hack passwords.

 

[NewDust]

I got an email at like half passed 5 in the morning today that there was a successful login to my twitch account all the way in Los Angeles, and I'm in New York.

First of all, I literally never use twitch. And second of all, what the fuck? So I log into twitch myself for the first time just to change my password, enable 2 step verification and then I say to myself, fuck it I never even use it so I disabled it.

Has this ever happened to anyone else?

Click to shrink...

I imagine they have/had access to your Amazon account...
Might want to check purchases.

Am I misremembering, or did you also have issues with PSN wayback?

 

[Dest]

Not Twitch, but other accounts. Unique passwords and 2FA all the things.

 

[TastyBurger666]

Got you beat there OP, I had an email from the Epic Game Store that someone had logged into my account...

Except I hadn't opened an Epic Store account yet. Managed to get into it and change all the passwords, and get 2FA on it.

 

[Gorger]

This is happening with me as well. Yesterday from Russia and today from Vietnam. I recently lost my twitch account for suspension, an account I have used for years, and it said it was indefinitely suspended for breaching several TOS violations. I rarely use my twitch other than linking it with curse gaming, so I am positive it was hacked. I tried to send an e-mail to twitch about this but they are not helping me out at all, so I created a new account and in two days it has had multiple successful logins. I wonder what's going on.

 

[Deleted member 26900]

This happens a lot. It happens all the time with my Ubi account (I have 2FA on).

 

[Deleted member 18161]

They hack Twitch accounts to use your prime sub (if you have your amazon prime associated with your twitch account) usually for the Fortnite items. They then sell the Fortnite account with the 'rare' items on ebay. When I got my account back and I was prime subscribed to a random guy.

 

[Vintage]

Got that too. Not using the account for anything, but still changed the password.

 

[entremet]

This happens all the time across the internet. It's not a new thing. 2FA and password managers are your friends.

 

[Falcon511]

Use 2fa. Don't use the google Authenticator app. Use something like Authy so you can use it across multiple devices. Also be aware of phishing emails. I have gotten a few that were pretending to be PayPal.

 

[The Artisan]

I imagine they have/had access to your Amazon account...
Might want to check purchases.

Am I misremembering, or did you also have issues with PSN wayback?

Click to shrink...

What's Amazon got to do with twitch? And thankfully nah I never really had an issue with PsN, but I always make sure to not have credit card info on there anyway. I remember several threads here of it getting hacked for others and that was a key suggestion

Got you beat there OP, I had an email from the Epic Game Store that someone had logged into my account...

Except I hadn't opened an Epic Store account yet. Managed to get into it and change all the passwords, and get 2FA on it.

Click to shrink...

Isnt Epic Store some new shit? And you just recently made an account and it already got hacked?

They hack Twitch accounts to use your prime sub (if you have your amazon prime associated with your twitch account) usually for the Fortnite items. They then sell the Fortnite account with the 'rare' items on ebay. When I got my account back and I was prime subscribed to a random guy.

Click to shrink...

Wow, crazed Fortnite motherfuckers is the root cause of the twitch infiltration huh. Goddamn. I don't have amazon prime but I do shop on amazon every now and then, how do I know I'm free from danger?

 

[InspectaDekka]

Oh yeah sorry about that bro was going to tell you I used your account to watch some Apex streams but yeah haha surprise

 

[Mupod]

They try to buy gift subscriptions and send them to themselves. Twitch support can refund them but there's no option to cancel/refund through the account panel.

 

[MAX PAYMENT]

I had the same issue. I think it's a robot, because I immediately activates two step authentication. Now my phone gets bombarded with passcode texts.

 

[LiK]

Yea, always use 2FA when it's offered.

 

[Thagirion]

I got an email at like half passed 5 in the morning today that there was a successful login to my twitch account all the way in Los Angeles, and I'm in New York.

First of all, I literally never use twitch. And second of all, what the fuck? So I log into twitch myself for the first time just to change my password, enable 2 step verification and then I say to myself, fuck it I never even use it so I disabled it.

Has this ever happened to anyone else?

Click to shrink...

Mine was Taiwan

 

[Aftermath]

Yup me too, ssems like signs of desperation, ubi too, instagram etc

2fa helps except when u get texts at 3am, 3;15am , 4am, 4:30am, 5, 6 etc that's annoying

 

[Detail]

OP check this website https://haveibeenpwned.com/ if your email shows on there then it's probably wise to change your email address on your accounts, I had issues like this for ages on multiple accounts but the second I changed my email on them all it fixed the problem.

 

[famikon]

nvm.

 

[The Artisan]

OP check this website https://haveibeenpwned.com/ if your email shows on there then it's probably wise to change your email address on your accounts, I had issues like this for ages on multiple accounts but the second I changed my email on them all it fixed the problem.

Click to shrink...

No pwnage found, but thanks for this. I wonder if I should have freaked out if they found something

 

[Izanagi89]

Literally happened to me 5 days ago. Login from Brazil. Changed all my passwords that I could that I had saved which was quite tedious but man, can't be too safe. This shit is outrageous...

 

[Reckheim]

someone keeps trying to log into my origin account from Russia, thank god for 2FA.

 

[StarStorm]

I had multiple login attempts on Uplay from India, China and Indonesia. I already changed my password and put on 2FA. They still attempt to login.
Luckily, Ubisoft sends out email notification if there is a suspicious login on my account now.

I have been pwned before, so I had to change all my passwords. Yeah, its a pain.

 

[Apathy]

2fa for Twitch is a must. Every week, at least 4 times, I'll get a text from Twitch giving me the authentication code. Someone consistently tries to get into it. And that's with nothing on it.

 

[Nec]

A few months ago someone hacked my Epic Account, linked his PS4 and everything, the problem was, my Epic password was my default password for almost everything, so, a bunch of people enter in my twitch account (my FFXIV Key was stole), Spotify, Battle.net, Ubi account, for my luck nothing was change (and major accounts like steam and gmail has another password), just lost de FFXIV key, and change every password that I had. And some websites don't even have some kind of warning when someone suspect enters in your account, I just hate when I receive email without any kind of location or IP from who is in my account.

 

[Kraken3dfx]

Sleep twitching.

Turn on 2fa and change your password.

 

[TerryLee81]

Use 2fa. Don't use the google Authenticator app. Use something like Authy so you can use it across multiple devices. Also be aware of phishing emails. I have gotten a few that were pretending to be PayPal.

Click to shrink...

What's wrong with the Google authenticator? I use this for most of my stuff...

 

[Hikari]

OP check this website https://haveibeenpwned.com/ if your email shows on there then it's probably wise to change your email address on your accounts, I had issues like this for ages on multiple accounts but the second I changed my email on them all it fixed the problem.

Click to shrink...

How do you find out where you were pwned though? Mine got 1 result but fuck knows where it's from because my email is totally safe.

 

[eddiemunstr]

Happened to me a few weeks ago, but I can no longer access my account. I had the twitch account on an old email I dont check often so by the time I found it it was too late. Ive been waiting weeks now for a reply from twitch support which is aparently normal for them. I dont care much about the account but I do want to keep the twitch prime library it had.

 

[Nec]

How do you find out where you were pwned though? Mine got 1 result but fuck knows where it's from because my email is totally safe.

Click to shrink...

Did you scroll down a bit? I think they show you which site that you was pwned.

 

[gaogaogao]

2 factor auth

 

[Hikari]

Did you scroll down a bit? I think they show you which site that you was pwned.

Click to shrink...

Wow you're right and it's a site I haven't used for years.... no big deal right?

 

[Falcon511]

What's wrong with the Google authenticator? I use this for most of my stuff...

Click to shrink...

Nothing at all. However if you get rid of your device or need to wipe your phone out then you loose your 2fa accounts. Authy allows you to sync them from the cloud under an account. Also Authy has a desktop app that allows you to get codes as well.

 

[Nec]

Wow you're right and it's a site I haven't used for years.... no big deal right?

Click to shrink...

If you didn't use the pwned site password for other accounts then no, otherwise yes it is a big deal, the type of dudes who does that try to login in every site possible.

 

[Deleted member 55421]

I dont understand how some people still dont have 2FA enabled on their accounts after all the treads we see regarding this type of stuff.

 

[Jump_Button]

Look out they could be a fake email to get you to go to they site and give your login info never use any link from emails

 

[LiK]

Wow you're right and it's a site I haven't used for years.... no big deal right?

Click to shrink...

If your PW has changed after the breach, you're fine. All they have is old info. I haven't had any issues after I did a major change to my PWs. They got my email/PW from a site I haven't visited in nearly a decade. I assume some older forums I used to visit when I was in college is probably still at risk but they can parade as me if they want. Not like anything valuable is in there.

 

[NewDust]

What's Amazon got to do with twitch?

Click to shrink...

Amazon Prime and Twitch Prime are linked to each other, Amazon owns Twitch. I imagine they share the same account infrastructure too, though I believe you can have different credentials on both services.

But you did have a(n unused) Twitch account already? Or did someone set-up an account on your email adres?
Edit: seemed you already had an account.

 

[Bluelote]

main security problem is when you use the same password on many things, I had that happen, a password from some forum or other website leaked and people managed to use it for some stuff like Origin, but it was very easy for me to solve it at least,
so yeah, don't use the same passwords.

 

[P00PNINJAMVC3MK]

My buddies twitch account just got stolen last week. I legit have no idea why because he doesn't have prime, he doesn't sub to anyone, and he doesn't even stream.

 

[LiK]

main security problem is when you use the same password on many things, I had that happen, a password from some forum or other website leaked and people managed to use it for some stuff like Origin, but it was very easy for me to solve it at least,
so yeah, don't use the same passwords.

Click to shrink...

I think after the initial breach with PSN way back, I ended up changing my PW for every site I go to. Haven't had any issues after that especially with 2FA being used for pretty much everything. Only some mega old forums/sites I no longer visit might be fucked but who cares.

 

[joe_zazen]

Had a guy use my cc for a hotel room in London and some shitty cologne. Still don't know how it was hacked.

 

[Deleted member 18161]

Wow, crazed Fortnite motherfuckers is the root cause of the twitch infiltration huh. Goddamn. I don't have amazon prime but I do shop on amazon every now and then, how do I know I'm free from danger?

Click to shrink...

Set up two step verification on your twitch account (I have it on my amazon too). They send a code to your phone when you log in to stop hackers who only have your log in details

 

[Edge]

What's Amazon got to do with twitch?

Click to shrink...

Amazon owns Twitch.

 

[Serious Sam]

99.9% of the time this happens because people don't use strong unique passwords for every single account. 2FA was introduced because of this reason. I think 2FA is crutch and is actually teaching people bad password habits. "Hmm I have 2FA, I can use whatever password because nothing can happen to my account now!"

 

[bsigg]

99.9% of the time this happens because people don't use strong unique passwords for every single account. 2FA was introduced because of this reason. I think 2FA is crutch and is actually teaching people bad password habits. "Hmm I have 2FA, I can use whatever password because nothing can happen to my account now!"

Click to shrink...

Trying to remember unique passwords for every website is such a god damn hassle. Thank god for login credential programs that handle everything for me.

 

[LiK]

Trying to remember unique passwords for every website is such a god damn hassle. Thank god for login credential programs that handle everything for me.

Click to shrink...

I have like 15 sites' PWs fully memorized, lol

 

[Pargon]

Got you beat there OP, I had an email from the Epic Game Store that someone had logged into my account...
Except I hadn't opened an Epic Store account yet. Managed to get into it and change all the passwords, and get 2FA on it.

Click to shrink...

Epic don't even verify email addresses when you create an account. They do this because it pushes their numbers up.

99.9% of the time this happens because people don't use strong unique passwords for every single account. 2FA was introduced because of this reason. I think 2FA is crutch and is actually teaching people bad password habits. "Hmm I have 2FA, I can use whatever password because nothing can happen to my account now!"

Click to shrink...

The whole point of 2FA is that it's more secure because it changes every ~30 seconds if you're using an app rather than SMS or email.
Microsoft have even been trialing password-less sign-in options for some of their services, using their authenticator app in place of a password.

It's still a good idea to use a unique and secure password, but that's far less important now if you're using 2FA.
You could post your password online and people still wouldn't be able to get into the account if they don't have the authenticator.

 

[Asbsand]

Happened to me too, OP. Somebody from Italy hijacked my account very randomly. I changed my login infos and haven't had an issue since.