Giant Bomb News

156 Comments

Valve Admits Steam Intrusion, No Current Evidence of Fraud

Just to be safe, you might want to change your password.

Steam's message boards were compromised Sunday, and it's been investigating since.

It’s one thing when a message board gets compromised, it’s quite another when it’s one of the most popular services amongst PC users.

An unidentified user or group of users gained access to the Steam message boards on Sunday, and subsequently “obtained access to a Steam database in addition to the forums,” the company said today.

The statement, signed by founder Gabe Newell, claims the company has found no evidence of credit card fraud, but recommends users to monitor their financial accounts closely. Even if you didn’t have an account on the Steam message boards, Valve recommends changing your password.

“I am truly sorry this happened, and I apologize for the inconvenience,” said Newell.”

Users accessed “a Steam database in addition to the forums” that had user names, hashed and salted passwords, game purchases, email addresses, billing addresses, and encrypted credit card information.There is currently no evidence the credit card information has been decrypted, and Valve is “still investigating.”

Only a few message board accounts were reportedly compromised, and they “do not know of any compromised Steam accounts” at this time.

Basically, change your password. If Valve issues further updates, I’ll let you know.

156 Comments
  • 156 results
  • 1
  • 2
  • 3
  • 4
Posted by patrickklepek
Steam's message boards were compromised Sunday, and it's been investigating since.

It’s one thing when a message board gets compromised, it’s quite another when it’s one of the most popular services amongst PC users.

An unidentified user or group of users gained access to the Steam message boards on Sunday, and subsequently “obtained access to a Steam database in addition to the forums,” the company said today.

The statement, signed by founder Gabe Newell, claims the company has found no evidence of credit card fraud, but recommends users to monitor their financial accounts closely. Even if you didn’t have an account on the Steam message boards, Valve recommends changing your password.

“I am truly sorry this happened, and I apologize for the inconvenience,” said Newell.”

Users accessed “a Steam database in addition to the forums” that had user names, hashed and salted passwords, game purchases, email addresses, billing addresses, and encrypted credit card information.There is currently no evidence the credit card information has been decrypted, and Valve is “still investigating.”

Only a few message board accounts were reportedly compromised, and they “do not know of any compromised Steam accounts” at this time.

Basically, change your password. If Valve issues further updates, I’ll let you know.

Posted by Zor

eep, better change my password, but i guess it also a good thing that i don't use the forums there.

Online
Posted by RockinKemosabe

Damn you hackers!

Posted by CharlesAlanRatliff

Thanks for the update! I'll go change it now before resuming Snake Eater HD.

Posted by Shmio

Does this mean BF3 is coming to steam?

Posted by addix

Well, off to change my password.

Posted by BonOrbitz

Whoob-boo-boo-boo-boo! I know what I'm doing when I get home tonight.

Edited by Ares42

Hmm, went to change password and got "Steam cannot process your request" error repeatedly =/

Posted by AhmadMetallic

wow. 
 
shit.

Posted by Jeffk38uk

Changed it as a precaution as mentioned and its unfortunate for any business to be hacked like this.

Posted by forkboy

Wish it would let me change my password.

Posted by artofwar420

Thanks for the heads up.

Posted by MeatSim

Can't hurt to change your password.

Posted by Rhete

Well, I have Steam guard on so they'd E-mail me if anyone tried to use my account. Plus I only use that password with Steam. Plus Steam didn't have my credit card number. So personally, I'm not too worried, but this news does suck in general.

Posted by BisonHero

@Ares42 said:

Hmm, went to change password and got "Steam cannot process your request" error repeatedly =/

I believe it gives you that error even if their servers are fine, but you're typing in your password incorrectly.

Posted by DaemonBlack

Thanks for the info Patrick.

Posted by Vitor
Posted by Mr_Skeleton

They should have Pulled a Sony and ignore this for a week.

Posted by Brian333

!@#@U#!@#*!#%*!#@(@#!*(&*@*@@10_**&^%@!&!

In the time-tested and revered words of Samuel L. Jackson "God dammit! I hate this hacker crap!

Posted by devilzrule27

@Mr_Skeleton: Given it happened on Sunday and we are finding out about it on Thursday, they kinda did.

Posted by Draugen

Man, I'm so sick of these thieving bastards.

Posted by VibratingDonkey

May not be necessary as I have unique passwords and in this case a different email, but changing your Steam password (and don't forget your security question) only takes like a minute, so, might as well.

The forums are currently down and you'll be forced to change your password during your next login.

Posted by PinkSoda

Oh them silly hackers.

Posted by MrAristocrates

@Mr_Skeleton: That's not what happene-Whatever. I was sick of dealing with this crap back in May.

Posted by Winsord

Unable to change passwords for the time being, which I guess makes sense as the infiltrators could pull a fast one. Ugh, these intrusions happening more and more frequently is really quite bothersome, and pretty freaky when it happens to a service that you've got personal details or financial details attached to. I really hope this wasn't a poor security issue on Valve's side... or do I? If they had strong security and people still got in, that's bad, but having a weak defense and people getting in is also bad; no winning here.

Posted by Nihilius

Changed password, but I forgot how to alter Credit/Debit cards.

Posted by jasonefmonk

@MrAristocrates said:

@Mr_Skeleton: That's not what happene-Whatever. I was sick of dealing with this crap back in May.

Misinformation spreads better than the reliable kind.

Edited by Poki3

You shouldn't be worried about your Steam account if you confirmed your email address. Steam will send you an email with a code you need to enter if you try loging in from a location steam doesn't recognize.

That said, if you use the same password anywhere else or have the same email password... Credit card information is also compromised. Though if everything was hashed, salted and encrypted chances anyone gets any real use out of it is pretty low. Better safe then sorry, I might request a new credit card... again -_-

Getting tired of changing my passwords though. First Kotaku, then Sony, now Valve. Getting sick of this "cyber terrorism" crap. Go back to finding way to phone for free...

Posted by DjCmeP

Changed my password for a more secure one. I didn't have a forum account but better be safe...

Posted by ervonymous

Steam Guard keeping me safe, too bad about the credit cards though..

Posted by boxing_hobo

See sony this How you do it

Posted by VicRattlehead

its a huge bummer that video game networks are getting targeted like this, i hope giantbomb is taking precautions with our data just incase

Posted by NoelVeiga

Oh, wow, I'm really proud at the measured and quiet response of everyone on the Internet about this. People are really taking it well and not freaking out before an actual problem happens. We must be growing up as a community, getting more mature.

...

Or the narrative that everybody has been adhering to for the last year or so has suddenly become contradictory with reality and the massive shock of cognitive dissonance has resulted in either silence or uncomfortable rationalization.

But most likely maturity.

Posted by Kowalo

Password changed, thanks for the heads up.

Posted by Winternet

Changed the password and then remembered: I don't have an account on the Steam forums. Oh well.

Posted by RuthLoose

Good on them for not taking days to get the word out.

Posted by MaFoLu

So this is where people start saying the Xbox is the best platform because it's totally safe?

Posted by thirteenyahs

@Winternet said:

Changed the password and then remembered: I don't have an account on the Steam forums. Oh well.

Same here. I'm shocked that I don't have a steam forum account.

Posted by Superfriend

Fuck everybody involved in this. Honestly. I have to change a lot of my passwords every month now and I´m constantly forced to monitor credit card activity because these assholes can´t keep their shit together. Oh and the hackers are no better either. Fuck em. They can all die and rot to a pile of dirt for all I care.

Posted by Rhaknar

sigh, changed my pass...now Steam says its wrong...whut? And Skyrim is out in half an hour, yay

Posted by Enigma777

Hey guys, remember when Sony got hacked and people were saying this would never happen to a "proper" service like Steam?

Posted by Nights

National conspiracy to help fuel the "need" for a privately owned, centralized login system!

Or people are just assholes.

Posted by Nihilius

@Pr1mus: Ah ok, thanks. It seems I don't have any cards attached which is a good sign. I usually use paypal.

Posted by mistergrieves

oh damn.

Posted by Otzlowe

I honestly hate the people who are okay with pulling shit like this. The internet is a cesspool, I get that, but these people are probably pissing in the pool that they swim in.

I'd change my password too, but Steam currently won't process the request. =/

Posted by Parsnip

Well, at least it's hashed and encrypted, unlike PSN was.

Posted by Ironlink

At times like these, I am happy that I use KeePass and unique, random passwords for every site. Now, I only need to change one password.

Posted by mewarmo990

I've always used PayPal for all my Steam purchases, so at least I don't have to worry about CC info. Still gonna update my passwords.

Posted by BabyChooChoo

@bonorbitz said:

Whoob-boo-boo-boo-boo! I know what I'm doing when I get home tonight.

...listening to dubstep?

Posted by Fuga

steam is dead

  • 156 results
  • 1
  • 2
  • 3
  • 4