"We learned that intruders obtained access to a Steam database in addition to the forums. This database contained information including user names, hashed and salted passwords, game purchases, email addresses, billing addresses and encrypted credit card information. We do not have evidence that encrypted credit card numbers or personally identifying information were taken by the intruders, or that the protection on credit card numbers or passwords was cracked.”
http://www.pcgamer.com/2011/11/10/steam-database-hacked-encrypted-credit-card-information-and-passwords-compromised/

"While we only know of a few forum accounts that have been compromised, all forum users will be required to change their passwords the next time they login. If you have used your Steam forum password on other accounts you should change those passwords as well.

We do not know of any compromised Steam accounts, so we are not planning to force a change of Steam account passwords (which are separate from forum passwords). However, it wouldn’t be a bad idea to change that as well, especially if it is the same as your Steam forum account password." http://www.rockpapershotgun.com/2011/11/10/steam-hacked/

Really... /sigh guess this date was picked deliberately.

(BTW sorry if it's a personal question but humor my curiosity Exorince, did you go get Skyrim tonight and if so where did you get it ? I myself went to Elko and got myself the PS3 collectors edition there. Again, no need to answer if you don't want to.)

Surprising, considering Steam's reputation for high security

At least the stolen info was encrypted and SALTed so it should be really tough for the hackers to get any useful info. Still, good idea to watch your statements more closely and be ready to cancel any cards that have suspicious activity.

Really annoying, I've been through identity theft before. Its not fun.

Maybe Steam will at least compensate us for this like Sony did.

I bought it on Steam last night, why?

If Steamguard isn't on for anyone at the moment, it'd be in your best interest to turn it on. (It's on by default) You should also check the "deauthorize all other computers" box.

Steam tab > Settings > Manage Steam Guard Account Security

I would change my password, but every time I try it says that it can't for some reason. This has been going on for probably a year now.

Just my curious nature. Had a chat with some of the people there, weren't as many as I expected I guess because it's so easy to get it from Steam but my friends went with me (despite not having to) for the atmosphere and to chat with other TES fans.

Wonder if said hackers, were working on how to breach Steam while you and many others were buying the game. Guess it's time for a password change for some people.

I haven't been able to turn that back on for over a month, every time I try it says "cannot currently process your request". I changed my password though, and I always use a separate password for every site.

Yeah I get the same pop up when I try to change my password but Steamguard worked fine for me.

If the Gmail account used to verify my Steam account uses a different password (which it does), the hackers can't do much can they as any changes have to be verified through the emai account, which they don't have access to.

Or am I talking out of my [censored]

No you're fine. Due to Steamguard, a code is sent to your email and if they can't access the code then they can't get to your Steam account.

I don't use credit cards with my Steam account and I use my work address as my billing address, so I think I'm ok. :shrug:


That, yes, and it sounds like the passwords are well-encrypted. It might not be a bad idea to change yours anyway, though, in case they somehow manage to decrypt them. To be honest, it's ridiculous to store passwords in a database in the clear. They should at least be hashed one-way at the minimum. I'm always amazed when I hear about passwords being stolen due to a database being compromised.

Thanks just wanted to make sure.

Removed all my credit cards off Steam when the lulzsec stuff was happening.

Me to. I did check the "Do not save my info for easier transactions in the future" option. It was my friends Visa debit card. I just gave her the cash and she transferred the funds.



Though it pissed me off last night because I couldn't remember my "Secret question" let alone answer it, it is a nice feature when it works properly. (I've logged into my one and only PC and it says I am logging into a new computer sometimes so I have to go through the email re-verification thing each time it happened. <_<)

Well I've just changed my password, I use paypal just hope that's all fine :cold:

Just great.

Well I changed my passwords, even though they don't think they got any of the Steam passwords. Suppose I should be using Keypass or something by now.

How do you remove (or see if it's stored) credit card info?

Don't forget to use Gmail 2-step verification.

I can't even find the settings tab

On top left corner.... STEAM > Options.

[#103128] The administrator has limited the number of new posts you can submit within a short time frame. Please wait 60 seconds before replying or posting a new topic.

Still not seeing it. The icon at the top just brings me to the Steam store. And the only options I see are: Store, Community, News, Forums, About, Support, Stats

It's above the big store, community, etc buttons. Top left corner. Steam > Settings.

My toolbar must be blocking it. Can someone link me there?

It's in the actual program for Steam.