PixelChat Data Breach
The 2022 PixelChat data breach occurred in July 2022 when the user database of PixelChat (pixelchat.tv), a streaming overlay, chat bot, and viewer engagement platform built for Twitch streamers and content creators, was breached and subsequently published on BreachForums.
Exposed Data Types
4- Email addresses
- Usernames
- Social media profiles
- Avatars
About This Breach
What information was affected in the PixelChat incident?
The compromised Elasticsearch dataset (pixelchat-users.json) contains registered user profiles. Impacted records for 206,524 unique accounts encompass:
- Account Profiles: PixelChat usernames and connected Twitch usernames.
- Broadcaster Identifiers: Twitch numerical user IDs (twitch_userId) and internal PixelChat account IDs (userId).
- Contact Credentials: Canonical validated email addresses.
- Visual Profile Links: Twitch avatar and profile picture URLs (avatarUrl).
How many accounts were affected?
Rigorous RFC canonical parsing and deduplication across 213,343 Elasticsearch user entries confirmed 206,524 unique valid email addresses.
Technical analysis and security risks
The correlation between Twitch broadcaster identities and personal email addresses facilitates targeted spear-phishing attacks, fake sponsorship malware distribution, Twitch account takeover attempts via credential spraying, and privacy breaches.
Recommended actions for affected users
Streamers and viewers who utilized PixelChat should:
- Ensure multi-factor authentication (MFA/2FA) is enforced across their Twitch and associated email accounts.
- Review authorized third-party application connections in Twitch account settings and revoke outdated tokens.
- Exercise extreme caution with unsolicited business or sponsorship inquiries.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
