Kick responds after hacker claims to have 50K passwords & emails
Unsplash.com: Kevin Ku / KickKick has responded after a hacker claimed to have access to 50,000 passwords, emails, and more from users of the popular streaming platform.
Kick has emerged as a fierce rival to Twitch, outbidding the Amazon-owned site to snatch major streamers like xQc, Amouranth, and more with eye-popping, non-exclusive deals.
Over the past year, Kick has risen up the ranks as more and more streamers eye the platform’s highly favorable sub split, with its co-founder even claiming the company will “eventually buy Twitch.”
However, panic rose in February 2024 after a supposed hacker claimed to have found a major security breach in Kick’s code.
KickKick responds after hacker finds “massive vulnerability”
On February 13, a Twitter/X user by the name ‘KickViewBot’ said they’d discovered a “massive vulnerability” in the site’s security.
In their post, they claimed to have found 50,000 account emails, passwords, payment information, addresses, and password resets for each account… including the likes of xQc, Trainwreck, Fousey, and even Adin Ross’s profiles.
“I want to be very clear about this, I have no intention of selling, distributing or leaking any of this information,” they wrote. “I completely understand the seriousness of this. I simply want someone from Kick to message me so we can fix this.”
However, Kick is claiming that this can’t be true, with the platform’s Head of Product denying the hacker’s allegations in a firm response.
“For the record, we do not store any passwords that are not encrypted,” they wrote. “This is 100% fabricated and your private information remains secure.”
Despite their assurances to the contrary, KickViewBot continues to assert their claims of being able to access this private information.
“Prove it,” they challenged. “Because the list that I’m looking at works, I’ve logged into 10+ accounts. I’d be happy to show you.”
That’s not all; they even upped the ante, threatening to expose a list of the accounts if Kick didn’t take the matter seriously.
For now, according to Kick, users’ information is safe… but that isn’t stopping the good guy ‘hacker’ from trying to prove their point.