Well this is bad timing.. Seems Steam hacked

Post » Thu Dec 08, 2011 11:09 am

Not a good advert for advocates of Steam, but then again there's not many major sites or companies that HAVEN'T seen a breach like this in the last couple of years (I think Facebook and Youtube have got off without any major events?).

Only ENCRYPTED password info was taking... however, they have got everybody's names, billing addresses, email addresses, and a history of purchases. Meaning they can target 'fake security emails'/postings/phonecalls to you that are personalised (a fake email that is generic, and a fake email that has your real name, address and a list of your purchases, look very different, and is much easier to fall for)... and this is probably the area of approach for utilising this stolen data - to further spoof/scam people.
User avatar
lauraa
 
Posts: 3362
Joined: Tue Aug 22, 2006 2:20 pm

Post » Fri Dec 09, 2011 1:26 am

http://emotibot.net/index.php?content=viewer&id=1824


Xbox live is next on the hacker list. I'll put $10k on that.
User avatar
R.I.P
 
Posts: 3370
Joined: Sat Dec 01, 2007 8:11 pm

Post » Thu Dec 08, 2011 4:45 pm

Imagine if Steam were to be down tonight and maybe a few days later. Man this is gonna svck if i cant play on the PC tonight.
User avatar
ShOrty
 
Posts: 3392
Joined: Sun Jul 02, 2006 8:15 pm

Post » Fri Dec 09, 2011 3:22 am

Also, make sure your security question is not something easily guessable, i.e. "what is your dog's name? spot / rover / fido" etc.
Even if you have a long, random password, someone can still hack your account by correctly guessing the security question.
User avatar
x_JeNnY_x
 
Posts: 3493
Joined: Wed Jul 05, 2006 3:52 pm

Post » Fri Dec 09, 2011 1:36 am

Aye. I frequent the Steam Forums and I've known about the hacking for days. Didn't know it extended into the client. Time to change my password.

User avatar
Crystal Birch
 
Posts: 3416
Joined: Sat Mar 03, 2007 3:34 pm

Post » Thu Dec 08, 2011 12:56 pm

So glad I ordered a physical copy.

Something about paying for something intangible irks me.
User avatar
Katharine Newton
 
Posts: 3318
Joined: Tue Jun 13, 2006 12:33 pm

Post » Thu Dec 08, 2011 6:42 pm

Imagine if Steam were to be down tonight and maybe a few days later. Man this is gonna svck if i cant play on the PC tonight.


It wont be, this was from Sunday and it was only a few users who have used the forums. This wasn't a blanket retrieval of data. You will still be able to play Skyrim without problems unless a tear in the fabric of time and space opens up and we're all svcked in, then in that case, we're all fuxxored.
User avatar
Cathrin Hummel
 
Posts: 3399
Joined: Mon Apr 16, 2007 7:16 pm

Post » Thu Dec 08, 2011 7:25 pm

So glad I ordered a physical copy.

Something about paying for something intangible irks me.

News Flash: you still have to use a Steam account with Skyrim. This issue still applies to you.
User avatar
gemma king
 
Posts: 3523
Joined: Fri Feb 09, 2007 12:11 pm

Post » Thu Dec 08, 2011 7:46 pm

It wont be, this was from Sunday and it was only a few users who have used the forums. This wasn't a blanket retrieval of data. You will still be able to play Skyrim without problems unless a tear in the fabric of time and space opens up and we're all svcked in, then in that case, we're all fuxxored.


It wasn't just the forum:

We learned that intruders obtained access to a Steam database in addition to the forums. This database contained information including user names, hashed and salted passwords, game purchases, email addresses, billing addresses and encrypted credit card information. We do not have evidence that encrypted credit card numbers or personally identifying information were taken by the intruders, or that the protection on credit card numbers or passwords was cracked. We are still investigating.

User avatar
SexyPimpAss
 
Posts: 3416
Joined: Wed Nov 15, 2006 9:24 am

Post » Fri Dec 09, 2011 3:14 am

News Flash: you still have to use a Steam account with Skyrim. This issue still applies to you.


It's a non-issue for him as Steam won't be down and he like the rest of us, can play. I have it DLed from Steam and I'm just waiting for midnight in the Bethesda time-zone. :thumbsup:
User avatar
Ladymorphine
 
Posts: 3441
Joined: Wed Nov 08, 2006 2:22 pm

Post » Thu Dec 08, 2011 1:59 pm

Allright. Removed visa data and changed my password. I guess I'm safe at the moment. But the thing is that I'm using my mums as I don't have one myself yet. :confused: I don't think she'd appreciate me having her account drained.
User avatar
Timara White
 
Posts: 3464
Joined: Mon Aug 27, 2007 7:39 am

Post » Thu Dec 08, 2011 12:51 pm

http://emotibot.net/index.php?content=viewer&id=1824


PS3, Steam... Hmm who's up next...
User avatar
kitten maciver
 
Posts: 3472
Joined: Fri Jun 30, 2006 2:36 pm

Post » Thu Dec 08, 2011 2:26 pm

It wasn't just the forum:


Don't forget...

While we only know of a few forum accounts that have been compromised, all forum users will be required to change their passwords the next time they login. If you have used your Steam forum password on other accounts you should change those passwords as well.

We do not know of any compromised Steam accounts, so we are not planning to force a change of Steam account passwords (which are separate from forum passwords). However, it wouldn’t be a bad idea to change that as well, especially if it is the same as your Steam forum account password.
User avatar
Luis Reyma
 
Posts: 3361
Joined: Fri Nov 02, 2007 11:10 am

Post » Thu Dec 08, 2011 4:08 pm

The Stream store was also down earlier today when I went to check the unlock time. What the hell is going on at Valve?

Edit: this is no mere coincidence, the hackers timed this attack with the release of 2 monster releases this week.
User avatar
Russell Davies
 
Posts: 3429
Joined: Wed Nov 07, 2007 5:01 am

Post » Fri Dec 09, 2011 12:49 am

Don't forget...

While we only know of a few forum accounts that have been compromised, all forum users will be required to change their passwords the next time they login. If you have used your Steam forum password on other accounts you should change those passwords as well.

We do not know of any compromised Steam accounts, so we are not planning to force a change of Steam account passwords (which are separate from forum passwords). However, it wouldn’t be a bad idea to change that as well, especially if it is the same as your Steam forum account password.

Yeah? I've already read the announcement. Fact remains that aside from the Steam Forum, which is it's own database, the actual Steam Customer database was compromised as well. Thats the real issue here.

It's a non-issue for him as Steam won't be down and he like the rest of us, can play. I have it DLed from Steam and I'm just waiting for midnight in the Bethesda time-zone. :thumbsup:

My point is that he thinks he's immune from this problem because he bought a boxed copy of Skyrim. This issue applies to all of Steam. So if he had an account before the hack, his information is just as compromised than if he bought Skyrim via Steam.
User avatar
TRIsha FEnnesse
 
Posts: 3369
Joined: Sun Feb 04, 2007 5:59 am

Post » Fri Dec 09, 2011 12:59 am

The Stream store was also down earlier today when I went to check the unlock time. What the hell is going on at Valve?


*plays conspiracy music* Origin folks hacked steam to show what an untrustworthy company steam is. Or, Steam was just a soft target for hackers, and they are off to sell our credit card information. Either way its a black eye for steam :P
User avatar
Melis Hristina
 
Posts: 3509
Joined: Sat Jun 17, 2006 10:36 pm

Post » Thu Dec 08, 2011 6:14 pm

Okay, changed email address and password, just to be on the safe side. Thanks for the heads up, thought it was only the forums.
User avatar
Kayleigh Williams
 
Posts: 3397
Joined: Wed Aug 23, 2006 10:41 am

Post » Fri Dec 09, 2011 2:21 am

Use Steam Guard guys

https://support.steampowered.com/kb_article.php?ref=4020-ALZM-5519
User avatar
OTTO
 
Posts: 3367
Joined: Thu May 17, 2007 6:22 pm

Post » Thu Dec 08, 2011 3:31 pm

Okay, changed email address and password, just to be on the safe side. Thanks for the heads up, thought it was only the forums.

Was just about to suggest changing your email address too.
User avatar
Sierra Ritsuka
 
Posts: 3506
Joined: Mon Dec 11, 2006 7:56 am

Post » Thu Dec 08, 2011 9:10 pm

Umm. Well this svcks. I just removed my card details, changed my password, and probably won't be buying off steam for a while. I'm a little worried about this tbh. I have steam guard active. They shouldn't ask us to store our card numbers on our accounts if they can't keep them safe.
User avatar
Nicole Coucopoulos
 
Posts: 3484
Joined: Fri Feb 23, 2007 4:09 am

Post » Thu Dec 08, 2011 9:02 pm

Yeah? I've already read the announcement. Fact remains that aside from the Steam Forum, which is it's own database, the actual Steam Customer database was compromised as well. Thats the real issue here.


Yeah, happened with PSN, now Steam, soon to be Live, it's a never ending cycle. We should all know about merchant allowances to prevent 3rd parties from using our card numbers. Reason I'm not worried, I just put a block on steam now just in case they somehow have Steams merchant number.
User avatar
e.Double
 
Posts: 3318
Joined: Tue Jul 24, 2007 11:17 pm

Post » Thu Dec 08, 2011 10:30 pm

hopefully credit cards won't be compromised . It's unlikely they will be but you never know.

Should be an option to use steam guard when you purchase a game.
User avatar
kasia
 
Posts: 3427
Joined: Sun Jun 18, 2006 10:46 pm

Post » Thu Dec 08, 2011 8:46 pm

Just checked. My account is fine, it seems. Will change password nonetheless.
But anyway, I didn't expect Steam to get hacked. Next is Facebook. There you go.
User avatar
butterfly
 
Posts: 3467
Joined: Wed Aug 16, 2006 8:20 pm

Post » Thu Dec 08, 2011 7:07 pm

I've always had bad experiences with Steam games, but was hopeful that I could just switch it to Offline mode while playing Skyrim, and forget I even had to have it open. Then... well, this. :brokencomputer:
User avatar
Eddie Howe
 
Posts: 3448
Joined: Sat Jun 30, 2007 6:06 am

Post » Fri Dec 09, 2011 3:07 am

XBL has already been hacked via a vulnerability in EA's servers for their particular side of the service. That's how my information was initially compromised - I had to sign up for their stupid servers to get my free Dragon Age 2 DLC. Microsoft has been keeping it as quiet as they can.

Don't believe me? Google 'PREMIUM GOLD PACK hack' and see. PREMIUM GOLD PACK and PREMIUM GOLD JUMBO (FIFA 12 consumables) are part of the hack.
User avatar
Claudz
 
Posts: 3484
Joined: Thu Sep 07, 2006 5:33 am

PreviousNext

Return to Othor Games