Twitch creators report account takeovers despite 2FA enabled

A wave of Twitch creators reported that unknown attackers have been able to access their accounts and modify payout settings. This happened even with two-factor authentication (2FA) enabled.

Creators started posting about the issue over the past couple of days. They were posting that they received emails warning that their payout method had been changed, while some discovered this change manually in their payout settings. None of them seems to have received any notifications about login attempts with enabled 2FA.