Steam Hacked | Credit Card Information at Risk

RavenSEAL

Diamond Member
Jan 4, 2010
8,661
3
0
Steam Hacked, Valve Investigating Possible Credit Card Theft
A message sent just now from Valve Corporation head Gabe Newell says credit card numbers and other personal information were compromised in a defacement attack on the Steam forums this Sunday.

Valve is advising all of its Steam customers to keep close eye on their credit card activity, as those numbers were inside a database the hackers penetrated during the attack, Newell wrote. The Steam Forums are currently closed.

"We do not have evidence that encrypted credit card numbers or personally identifying information were taken by the intruders, or that the protection on credit card numbers or passwords was cracked. We are still investigating," Newell wrote. "We don't have evidence of credit card misuse at this time. Nonetheless you should watch your credit card activity and statements closely."

The database exposed during the attack "contained information including user names, hashed and salted passwords, game purchases, email addresses, billing addresses and encrypted credit card information," Newell said in the statement.

Google Article Feed

Link

See here.

EcEUJ.png



Not good...
 
Last edited:

dmoney1980

Platinum Member
Jan 17, 2008
2,473
39
91
crap! what if I never saved my card info when purchasing stuff, would they still have the info?
 

StinkyPinky

Diamond Member
Jul 6, 2002
6,991
1,284
126
Whoa. Although they did at least encrypt everything. It's not clear they had time to get access to the credit card details.
 

mb

Lifer
Jun 27, 2004
10,233
2
71
Any confirmation this message is even legit? I don't know how credible one blog post is.
 

mb

Lifer
Jun 27, 2004
10,233
2
71
Last edited:

Dankk

Diamond Member
Jul 7, 2008
5,558
25
91
This doesn't make sense. Did they hack the Steam forums, or Steam itself?

If they hacked the Steam forums, then wtf does that have to do with stealing credit cards? Last time I checked, you don't need to register with a credit card to post on the Steam forums.

Steam and it's forums are two separate entities. You need separate accounts for both.

Anyway, I'd imagine people probably have nothing to worry about. Valve is pretty good with security (most of the time, anyway). Of course like Newell said it still doesn't hurt to check your bank statements.
 

mb

Lifer
Jun 27, 2004
10,233
2
71
This doesn't make sense. Did they hack the Steam forums, or Steam itself?

If they hacked the Steam forums, then wtf does that have to do with stealing credit cards? Last time I checked, you don't need to register with a credit card to post on the Steam forums.

Steam and it's forums are two separate entities. You need separate accounts for both.

Anyway, I'd imagine people probably have nothing to worry about. Valve is pretty good with security (most of the time, anyway). Of course like Newell said it still doesn't hurt to check your bank statements.
They probably are separate but it sounds like more than one database was targeted.
 

zokudu

Diamond Member
Nov 11, 2009
4,364
1
81
Urgh really. I didn't mind when they hit PSN but I have so many steam games I would hate to lose any information from it.

Passwords changing as we speak.
 

Dankk

Diamond Member
Jul 7, 2008
5,558
25
91
Urgh really. I didn't mind when they hit PSN but I have so many steam games I would hate to lose any information from it.

Passwords changing as we speak.

More clarification:

  • Steam forum passwords are outright compromised. If you use the same password for anything else, change it.
  • Steam account data (your Steam password, personal information, and billing details) has been obtained but not cracked. As far as Valve knows, the data is still protected by their encryption scheme. Steam Guard will protect your account, but it may be wise to change your password(s) anyway in case the situation worsens.

And even if you may not like those annoying emails, Steam Guard is still a good extra layer of security to be using. :) If you don't have it activated:

  • Click Steam
  • Go to Settings
  • Manage Steam Guard Account Security...
  • Deauthorize all other computers now
 

Raduque

Lifer
Aug 22, 2004
13,140
138
106
Mmm, well, I haven't updated my CC expiration and new CVV code in Steam anyway, so they could have my number, but won't be able to use it.

Changed my Steam password, tho.

Edit: Can't remember what else uses the same password as steam forums...
 
Last edited:

KeithTalent

Elite Member | Administrator | No Lifer
Administrator
Nov 30, 2005
50,231
118
116
Damn it, just tried to login and change my password from my phone, but the secure site will not load. Blocked at work too. :(

Have to wait until tonight I guess.

KT
 

shortylickens

No Lifer
Jul 15, 2003
80,287
17,082
136
Fine by me. That credit card was going to expire soon anyhow. I'll just cancel it a week early and get a new one. No biggie.
 

postmortemIA

Diamond Member
Jul 11, 2006
7,721
40
91
November 10th, 2011

Dear Steam Users and Steam Forum Users:
Our Steam forums were defaced on the evening of Sunday, November 6. We began investigating and found that the intrusion goes beyond the Steam forums.
We learned that intruders obtained access to a Steam database in addition to the forums. This database contained information including user names, hashed and salted passwords, game purchases, email addresses, billing addresses and encrypted credit card information. We do not have evidence that encrypted credit card numbers or personally identifying information were taken by the intruders, or that the protection on credit card numbers or passwords was cracked. We are still investigating.
We don’t have evidence of credit card misuse at this time. Nonetheless you should watch your credit card activity and statements closely.
While we only know of a few forum accounts that have been compromised, all forum users will be required to change their passwords the next time they login. If you have used your Steam forum password on other accounts you should change those passwords as well.
We do not know of any compromised Steam accounts, so we are not planning to force a change of Steam account passwords (which are separate from forum passwords). However, it wouldn’t be a bad idea to change that as well, especially if it is the same as your Steam forum account password.
We will reopen the forums as soon as we can.
I am truly sorry this happened, and I apologize for the inconvenience.
Gabe.

Text contents; move mouse over to see text.
 

Wyndru

Diamond Member
Apr 9, 2009
7,318
4
76
How do you check which cc is associated with your steam account, do you have to purchase another game? I don't see it in the acct settings, but I know it's saved because I don't have to enter it when I purchase games.
 

shortylickens

No Lifer
Jul 15, 2003
80,287
17,082
136
How do you check which cc is associated with your steam account, do you have to purchase another game? I don't see it in the acct settings, but I know it's saved because I don't have to enter it when I purchase games.

Whenever you buy a game it tells you the last 4.
Check your confirmation emails and I think they have it too.
 

kinev

Golden Member
Mar 28, 2005
1,647
30
91
Well, the Steam Client is borked, too. This is a perfect example of why hard copy media will not ever leave. I can't access any of the Steam games that I paid for because they can't keep their site safe. Just imagine if everyone relied on a cloud computing system....
 

Modelworks

Lifer
Feb 22, 2007
16,240
7
76
Disposable credit card numbers win again. Seriously more banks need to do this. One time use numbers for online purchases.
 

Wyndru

Diamond Member
Apr 9, 2009
7,318
4
76
Whenever you buy a game it tells you the last 4.
Check your confirmation emails and I think they have it too.

Ahh I forgot about the emails, thanks.

And my ISP's email password change is down tonight too with no idea of when it will be fixed. Excellent.
Yanni>I am sorry to inform you and have received a recent update that currently we are experiencing issue with password updates.
Yanni>Our technicians are working to resolve the issue as soon as possible. At this time there is no known estimated time of repair
Yanni>I apologize for the inconvenience and thank you for your patience.
 

invidia

Platinum Member
Oct 8, 2006
2,151
1
0
I always used paypal on Steam, but last night when I bought Skyrim, I decided to use my credit card for some points and save it.


Seriously, WTF