Steam Hacked on Nov 6, 2011

Started by Shadowwolf, November 10, 2011, 10:05:48 PM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

Shadowwolf

Just a heads up everyone who has a Steam account, they were hacked last Sunday.

The following is from Steam:

Quote from: Gabe external=http://forums.steampowered.com/forums/Dear Steam Users and Steam Forum Users:

Our Steam forums were defaced on the evening of Sunday, November 6. We began investigating and found that the intrusion goes beyond the Steam forums.

We learned that intruders obtained access to a Steam database in addition to the forums. This database contained information including user names, hashed and salted passwords, game purchases, email addresses, billing addresses and encrypted credit card information. We do not have evidence that encrypted credit card numbers or personally identifying information were taken by the intruders, or that the protection on credit card numbers or passwords was cracked. We are still investigating.

We don't have evidence of credit card misuse at this time. Nonetheless you should watch your credit card activity and statements closely.

While we only know of a few forum accounts that have been compromised, all forum users will be required to change their passwords the next time they login. If you have used your Steam forum password on other accounts you should change those passwords as well.

We do not know of any compromised Steam accounts, so we are not planning to force a change of Steam account passwords (which are separate from forum passwords). However, it wouldn't be a bad idea to change that as well, especially if it is the same as your Steam forum account password.

We will reopen the forums as soon as we can.

I am truly sorry this happened, and I apologize for the inconvenience.

Gabe.
Come to the darkside, we have cookies.
"A flute with no holes is not a flute, and a donut with no hole is a danish" - Chevy Chase as Ty Webb in Caddyshack
"Be who you are and say what you feel, because those who mind don't matter, and those who matter don't mind."- Dr. Suess


Air

From what I've read, the accounts were encrypted about as good as can be.  And if you had steam guard active, it should let you know if someone is trying to change your password.
"Don't be a Dick." - Wil Wheaton
"There are three kinds of men. The one that learns by reading. The few who learn by observation. The rest of them have to pee on the electric fence for themselves." - Will Rogers

Kothnok

> And if you had steam guard active...

FYI, it is active by default if you've created an account in the past year or so. Older accounts may or may not have it active.
No matter how often you refill the gene pool, there's always a shallow end.

Fleecy

Well my account has no info regarding credit card at all being that Geos has bought my games for me :P  Though his could potentially be compromised...