Steam Hacked

[Andrew]

Via IGN:

Gabe Newell announced today that Steam's database and forums have been hacked. According to Newell, Steam's forums were defaced earlier this week, and further investigation led to evidence that the hackers had obtained access to the Steam database.

"This database contained information including user names, hashed and salted passwords, game purchases, email addresses, billing addresses and encrypted credit card information," Newell wrote. "We do not have evidence that encrypted credit card numbers or personally identifying information were taken by the intruders, or that the protection on credit card numbers or passwords was cracked. We are still investigating."

While the hackers may have had access to the data, it isn't immediately clear how much information they actually took, or if any of it has been used.

"We don't have evidence of credit card misuse at this time," Newell added. "Nonetheless you should watch your credit card activity and statements closely."

[el badman]

Saw this earlier, and that's why Steam is taking sooo long to start right now. I tried changing my password but it tells me that "this operation cannot be completed at this time"...Hope they can get this under control fast.

[benji]

The hack was last weekend.

It's everyone downloading Skyrim and trying to change their password.

[Patr1ck]

Just enable steamguard and change your email password, not like you really need to do that. I knew I shouldn't have saved my payment info on there.

[benji]

Or you know, be sensible and don't use the same password for everything in the first place.

[Patr1ck]

Never do.

[shadowgrin]

Probably EA-hired haxxors that did it.

[JaoSming]

The hack was last weekend.

This was a part of the forum hack right? Do I need to change my password now even though I changed it when that happened last week?

[benji]

No, and as of yet the only things known to be compromised were the forum accounts. (Which are completely separate accounts from Steam for just this very reason.) This isn't like Sony or EA where they were storing all user information in a plain text file, Valve had all of this encrypted. It's also why they shut down the forums immediately to block the known entrance point.

[Patr1ck]

When was ea hacked/where did the text file info come from for ea?

[benji]

Last summer. Battlefield Heroes and a few others with EA accounts. It was the last operation of LulzSec.

The text file came from EA because that's how they were storing the information.

[benji]

Could be true, could be not, Gabe replies quite often to people like this: