Twitch blames server error for data leak

What kind of server configuration error could cause this level of leak unless there was already a ton of other security flaws already?

Like they managed to expose their server to a public network? But why was all this info stored just there?

Why was there no auth? Does this mean that every twitch employee has access to all this content at all times? Surely that's a flaw itself.

If this was a flaw on a single server, they really need to reevaluate how they handle security, because a single hole shouldn't be this devastating.

I'll post that with an asterisk that I was at Sony when the Sony hack happened. If Sony had this level of separation, things could have been significantly worse (and that was already pretty terrible)