Yesterday, we at Cybersecurity88 reported that StreamElements’ data was being sold on an underground forum, although we couldn’t verify the authenticity of the claim. Today, StreamElements has officially confirmed the data breach.
🚨 Data Breach Alert
A threat actor named “whorless” claims to have stolen personal info from StreamElements, including Name, Address, Phone, and Email.
📊 Record count: 212,358 total
139,642 emails
146,726 phone numbers
Over 100,000 people impacted.
Now for sale as of March 25 pic.twitter.com/Tb1jTazJX1— CyberSecurity88 (@CSec88) March 25, 2025
Background
StreamElements is a popular cloud-based platform designed for streamers, offering a range of tools for content creators on Twitch and YouTube. It includes features like stream overlays, donation systems, chatbots, activity feeds, integration with merchandise stores, stream analytics, loyalty programs, and more.
With partnerships from leading gaming brands, it is popular among top-tier Twitch streamers and has over one million registered users.
What Happened
A threat actor named “victim” claimed to have stolen data from 210,000 StreamElements users on March 20, 2025. The threat actor shared samples of the stolen data, which contains full names, addresses, phone numbers, and email addresses.
This data was posted yesterday, and StreamElements announced that the stolen information is older, coming from a third-party provider that StreamElements ceased working with last year. StreamElements has also reaffirmed that their systems remain secure.
We recently became aware of a data security incident involving a third-party service provider we stopped working with last year.
We can confirm no StreamElements servers have been breached.
While this incident did not originate within StreamElements systems, we take the…
— StreamElements Support (@StreamElementsS) March 25, 2025
Another concerning detail is that affected users received emails containing their PII, with the message claiming to be from the “Diddy Squad.”
Conclusion
In conclusion, users should remain vigilant for potential phishing attempts and be cautious of any suspicious communications. If you are among the affected individuals or have a feeling that something isn’t right, it’s strongly recommended to reset your password and monitor your accounts for any unusual activity. Staying alert can help minimize the risk of further security breaches.
Follow us on X and LinkedIn for the latest cybersecurity news.
