Steam hacked. Credit card and personal data compromised (Keep discussion here)

This topic is locked from further discussion.

Avatar image for Black_Knight_00
Black_Knight_00

78

Forum Posts

0

Wiki Points

0

Followers

Reviews: 12

User Lists: 0

#1 Black_Knight_00
Member since 2007 • 78 Posts

http://kotaku.com/5858473/steam-hacked-valve-investigating-possible-credit-card-theft

If you have a Steam account stop reading and go change your password!

Steam boss Gabe Newell just revealed Steam has suffered a hacker attack and personal data, including credit card details are likely to have been compromised.

It's still unclear how much data has been stolen, an investigation is currently in progress. Newell urges an immediate password change and close monitoring of your credit card activity. Do it.

Mod: Stickied. Please keep discussion here.

Mod Edit number two: Here's a quick guide on how to change your password, e-mail, and security question, courtesy of Daavpuke. You know -- just in case you need it.

Anyone that wants to change their password, follow these steps: Open your Steam client > Steam tab > Settings > Second button "Change Password or Secret Question"

Avatar image for PetJel
PetJel

3725

Forum Posts

0

Wiki Points

0

Followers

Reviews: 5

User Lists: 0

#2 PetJel
Member since 2009 • 3725 Posts

Just saw this aswell.

Dear Steam Users and Steam Forum Users:

Our Steam forums were defaced on the evening of Sunday, November 6. We began investigating and found that the intrusion goes beyond the Steam forums.


We learned that intruders obtained access to a Steam database in addition to the forums. This database contained information including user names, hashed and salted passwords, game purchases, email addresses, billing addresses and encrypted credit card information. We do not have evidence that encrypted credit card numbers or personally identifying information were taken by the intruders, or that the protection on credit card numbers or passwords was cracked. We are still investigating.


We don't have evidence of credit card misuse at this time. Nonetheless you should watch your credit card activity and statements closely.


While we only know of a few forum accounts that have been compromised, all forum users will be required to change their passwords the next time they login. If you have used your Steam forum password on other accounts you should change those passwords as well.


We do not know of any compromised Steam accounts, so we are not planning to force a change of Steam account passwords (which are separate from forum passwords). However, it wouldn't be a bad idea to change that as well, especially if it is the same as your Steam forum account password.


We will reopen the forums as soon as we can.


I am truly sorry this happened, and I apologize for the inconvenience.


Gabe.

Avatar image for Metamania
Metamania

12035

Forum Posts

0

Wiki Points

0

Followers

Reviews: 24

User Lists: 0

#3 Metamania
Member since 2002 • 12035 Posts

This came from Daavpuke, a fellow Gamespot forum regular:

Anyone that wants to change their password, follow these steps: Open your Steam client > Steam tab > Settings > Second button "Change Password or Secret Question"

Anyone that is using Steam right now ought to follow the instructions above ASAP, so that they can avoid this really quick!

Avatar image for Legendaryscmt
Legendaryscmt

12532

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

#4 Legendaryscmt
Member since 2005 • 12532 Posts

Well, looks like we'll be getting free games when this is all done and over with. :cool:

Joke aside though, this really sucks.

Avatar image for PetJel
PetJel

3725

Forum Posts

0

Wiki Points

0

Followers

Reviews: 5

User Lists: 0

#5 PetJel
Member since 2009 • 3725 Posts

Just, hypothetically, imagine hackers planting a trojan in the unlock download for Skyrim. It would be the cyberattack of the century. lol.

Avatar image for c_rakestraw
c_rakestraw

14627

Forum Posts

0

Wiki Points

0

Followers

Reviews: 64

User Lists: 0

#6 c_rakestraw  Moderator
Member since 2007 • 14627 Posts

This came from Daavpuke, a fellow Gamespot forum regular:

Anyone that wants to change their password, follow these steps: Open your Steam client > Steam tab > Settings > Second button "Change Password or Secret Question"

Anyone that is using Steam right now ought to follow the instructions above ASAP, so that they can avoid this really quick!

Metamania

Hey, Black_Knight? I'm gonna throw this little tip into your post, make it more easily seen. Hope you don't mind.

Avatar image for Treflis
Treflis

13757

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

#7 Treflis
Member since 2004 • 13757 Posts
Done and Done, Changed password, Secret question, Email, Checked to see if the Credit card info was saved and moved my money from the bank account linked to my creditcard to my other bank accounts just incase.
Avatar image for Lief_Ericson
Lief_Ericson

7082

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

#8 Lief_Ericson
Member since 2005 • 7082 Posts

Wiped my card, changed pass

Avatar image for TheHighWind
TheHighWind

5724

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

#9 TheHighWind
Member since 2003 • 5724 Posts

It was probably one of those SteamPunks :P

With thier top hats and weird clothes.

Anyways I changed my pass.

Avatar image for Warhawk_
Warhawk_

1497

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

#10 Warhawk_
Member since 2006 • 1497 Posts

Good thing I wiped out my credit card info. I did it back when PSN was also hacked because I was afraid that Steam would be hacked as well in the future. And I guess I was right so that's good for me. I also just changed my password as well.

Avatar image for DJ_Lae
DJ_Lae

42748

Forum Posts

0

Wiki Points

0

Followers

Reviews: 73

User Lists: 0

#11 DJ_Lae
Member since 2002 • 42748 Posts
Can't change my password right now - says 'Steam cannot currently process your request.' Not that I'm hugely concerned, though. I don't have a Steam forum account.
Avatar image for KudoS17
KudoS17

1050

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

#12 KudoS17
Member since 2008 • 1050 Posts

Thanks for the heads up

Avatar image for SavageKantus
SavageKantus

84

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

#13 SavageKantus
Member since 2011 • 84 Posts
Ho

Wiped my card, changed pass

Lief_Ericson
How do you wipe out credit card? I never used one but just wanna make sure.(I used gift card)
Avatar image for deactivated-59b71619573a1
deactivated-59b71619573a1

38222

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

#14 deactivated-59b71619573a1
Member since 2007 • 38222 Posts

Just, hypothetically, imagine hackers planting a trojan in the unlock download for Skyrim. It would be the cyberattack of the century. lol.

PetJel

Anyway yeah it just shows its not just PSN that can get hacked. Even the mighty steam can too. But considering the sheer amount of downloads that happen on a regular basis there and all the credit card info accessible its kinda scary

Avatar image for deactivated-59b71619573a1
deactivated-59b71619573a1

38222

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

#15 deactivated-59b71619573a1
Member since 2007 • 38222 Posts

Ho[QUOTE="Lief_Ericson"]

Wiped my card, changed pass

SavageKantus

How do you wipe out credit card? I never used one but just wanna make sure.(I used gift card)

if you never used a credit card there then you have no worries. I too have never used a credit card on it. I just got demos and such

Avatar image for c_rakestraw
c_rakestraw

14627

Forum Posts

0

Wiki Points

0

Followers

Reviews: 64

User Lists: 0

#17 c_rakestraw  Moderator
Member since 2007 • 14627 Posts

GRRRR How dare they, they suck! Protest! I will never buy a valve product again!!! Worst company ever! SUE!!! (and that is how this thread would go if it were Sony)dvader654

Pretty much. Crazy how who the victim is can change people's response, eh?

Avatar image for ExoticAnimal
ExoticAnimal

39796

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

#18 ExoticAnimal
Member since 2010 • 39796 Posts
If you've never used the Steam forums, you should be fine, right?
Avatar image for deactivated-5b69bebd1b0b6
deactivated-5b69bebd1b0b6

6176

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

#19 deactivated-5b69bebd1b0b6
Member since 2009 • 6176 Posts

So um is this another case of poor security measures? Honestly, with all these hack attacks I feel like quiting the internet as a whole. Like really, no where seems safe on the internetz.

Avatar image for savebattery
savebattery

3626

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

#20 savebattery
Member since 2009 • 3626 Posts
I've never been to the forums, nor have I ever purchased a game via Steam (though I have activated my Humble Indie Bundle and retail games via Steam), so I think I'm okay. I don't even remember my Steam password, to be honest...
Avatar image for c_rakestraw
c_rakestraw

14627

Forum Posts

0

Wiki Points

0

Followers

Reviews: 64

User Lists: 0

#21 c_rakestraw  Moderator
Member since 2007 • 14627 Posts

If you've never used the Steam forums, you should be fine, right?ExoticAnimal

I think so. Probably best to change your password anyway, just to be safe.

Avatar image for foxhound_fox
foxhound_fox

98532

Forum Posts

0

Wiki Points

0

Followers

Reviews: 13

User Lists: 0

#22 foxhound_fox
Member since 2005 • 98532 Posts
Good thing my credit card that would be tied to my account expired in July. I'll get around to checking later when I have access to a computer.
Avatar image for killa4lyfe
killa4lyfe

3849

Forum Posts

0

Wiki Points

0

Followers

Reviews: 3

User Lists: 0

#23 killa4lyfe
Member since 2008 • 3849 Posts

[QUOTE="dvader654"]GRRRR How dare they, they suck! Protest! I will never buy a valve product again!!! Worst company ever! SUE!!! (and that is how this thread would go if it were Sony)c_rake

Pretty much. Crazy how who the victim is can change people's response, eh?

I think it's best not to dwell on that fact and just hope that the damage isn't as big as it was before. :( Also, I can see why Sony was hacked, many people didn't agree with their "business ethics" but Valve? Come on, the only thing these guys pose a danger to is your wallet. :?
Avatar image for ronvalencia
ronvalencia

29612

Forum Posts

0

Wiki Points

0

Followers

Reviews: 1

User Lists: 0

#24 ronvalencia
Member since 2008 • 29612 Posts

I use paypal. My stored credit card details has expired a few months ago and my credit card never worked with Steam.

Avatar image for ExoticAnimal
ExoticAnimal

39796

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

#25 ExoticAnimal
Member since 2010 • 39796 Posts

[QUOTE="ExoticAnimal"]If you've never used the Steam forums, you should be fine, right?c_rake

I think so. Probably best to change your password anyway, just to be safe.

Yea, did that earlier.
Avatar image for S0lidSnake
S0lidSnake

29001

Forum Posts

0

Wiki Points

0

Followers

Reviews: 14

User Lists: 0

#26 S0lidSnake
Member since 2002 • 29001 Posts

I've changed so many passwords in the last few months, cant even remember what my Steam password is.

Im hoping I get HL Episode 1 and 2 for free out of this. Would like Crysis 1 and 2 for free but thats not likely.

Avatar image for SteelAttack
SteelAttack

10520

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

#27 SteelAttack
Member since 2005 • 10520 Posts
[QUOTE="dvader654"]GRRRR How dare they, they suck! Protest! I will never buy a valve product again!!! Worst company ever! SUE!!! (and that is how this thread would go if it were Sony)

There's a world of difference between Valve and Sony in regards to both user data management and response.
Avatar image for branketra
branketra

51726

Forum Posts

0

Wiki Points

0

Followers

Reviews: 9

User Lists: 9

#28 branketra
Member since 2006 • 51726 Posts

EDIT:Actually, I forgot my password, so I attempted to have steam send my login details to my email, but the site is saying it has no record of that username. The problem with that is I am logged in right now.

Avatar image for Black_Knight_00
Black_Knight_00

78

Forum Posts

0

Wiki Points

0

Followers

Reviews: 12

User Lists: 0

#29 Black_Knight_00
Member since 2007 • 78 Posts
[This message was deleted at the request of the original poster]
Avatar image for Black_Knight_00
Black_Knight_00

78

Forum Posts

0

Wiki Points

0

Followers

Reviews: 12

User Lists: 0

#30 Black_Knight_00
Member since 2007 • 78 Posts
Good to see many of you guys are already out of harms way. Thank Kotaku for ringing the alarm bell as soon as they did (see, they are useful, sometimes lol). If I may, and pardon the analogy, this is yet another kick in the already sore balls of digital distribution, you know, the one that's meant to entirely replace physical copies of games in a few years? Imagine if hackers managed to be more stealthy about this and hypothetically planted a software that could permanently delete all accounts: it would have been just like having a fire destroying your whole game collection. People were lucky this time, but just think about it: with DD anything that happens on a far away network can jeopardize your entire collection, entirely out of your control. Add identity and credit card theft to the mix and those physical copies keep looking better and better. To me, at least.
Avatar image for 190586385885857957282413308806
190586385885857957282413308806

13084

Forum Posts

0

Wiki Points

0

Followers

Reviews: 116

User Lists: 0

#31 190586385885857957282413308806
Member since 2002 • 13084 Posts
[QUOTE="SteelAttack"][QUOTE="dvader654"]GRRRR How dare they, they suck! Protest! I will never buy a valve product again!!! Worst company ever! SUE!!! (and that is how this thread would go if it were Sony)

There's a world of difference between Valve and Sony in regards to both user data management and response.

You beat me to it. Valve responded in 5 days....how long did it take Sony to admit their problem? How long was Sony crippled for after? Yeah i guess it's the same thing.
Avatar image for c_rakestraw
c_rakestraw

14627

Forum Posts

0

Wiki Points

0

Followers

Reviews: 64

User Lists: 0

#33 c_rakestraw  Moderator
Member since 2007 • 14627 Posts

I see we are doing our best to hide this thread. :Pdvader654

Hey -- don't look at me. I didn't pin it.

Avatar image for Black_Knight_00
Black_Knight_00

78

Forum Posts

0

Wiki Points

0

Followers

Reviews: 12

User Lists: 0

#34 Black_Knight_00
Member since 2007 • 78 Posts

[QUOTE="dvader654"]I see we are doing our best to hide this thread. :Pc_rake

Hey -- don't look at me. I didn't pin it.

Where did you read it was a joke?
Avatar image for King9999
King9999

11837

Forum Posts

0

Wiki Points

0

Followers

Reviews: 44

User Lists: 0

#35 King9999
Member since 2002 • 11837 Posts

Luckily, I found no unusual activity on my account. I changed my password anyway to be on the safe side.

Avatar image for Just-Breathe
Just-Breathe

3130

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

#36 Just-Breathe
Member since 2011 • 3130 Posts

[QUOTE="dvader654"]GRRRR How dare they, they suck! Protest! I will never buy a valve product again!!! Worst company ever! SUE!!! (and that is how this thread would go if it were Sony)c_rake

Pretty much. Crazy how who the victim is can change people's response, eh?

No, the two situations are entirely different.
Avatar image for James161324
James161324

8315

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

#37 James161324
Member since 2009 • 8315 Posts

Thanks for the heads up changed my pssword and removed my credit card. But i have no libilityon any unauthorized credit charges from my bank so i'm fine if they got my card.

Avatar image for NiKva
NiKva

8181

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

#38 NiKva
Member since 2010 • 8181 Posts
First PSN, now Steam. This is why Xbox 360 and Wii is the best :3 Hope I didn't jinx Xbox 360 though, I don't want my information to be stolen ;~;
Avatar image for outworld222
outworld222

4646

Forum Posts

0

Wiki Points

0

Followers

Reviews: 3

User Lists: 0

#39 outworld222
Member since 2004 • 4646 Posts

tsk tsk. I will be changing two passwords since I have 2 steam accounts.

Avatar image for Loegi
Loegi

1692

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

#40 Loegi
Member since 2009 • 1692 Posts
But the files they took were encrypted, and they don't know if they cracked the encryption.
Avatar image for Black_Knight_00
Black_Knight_00

78

Forum Posts

0

Wiki Points

0

Followers

Reviews: 12

User Lists: 0

#41 Black_Knight_00
Member since 2007 • 78 Posts
But the files they took were encrypted, and they don't know if they cracked the encryption.Loegi
They also don't know that they didn't, so why take the chance?
Avatar image for GodModeEnabled
GodModeEnabled

15314

Forum Posts

0

Wiki Points

0

Followers

Reviews: 9

User Lists: 0

#42 GodModeEnabled
Member since 2005 • 15314 Posts
I didn't even notice this thread till now because of the sticky. Sticky = icky and I auto scroll down when I click into here on habit. Anyways I use paypal for stuff like steam and PSN so meh. Gabe seems like a pretty decent guy and considering this thing is his baby i'm sure he'll have the situation resolved in a timely manner and better security implemented. Steam literally made him rich so I don't see him effing around with it too much when it comes to stuff like this.
Avatar image for Loegi
Loegi

1692

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

#43 Loegi
Member since 2009 • 1692 Posts
[QUOTE="Loegi"]But the files they took were encrypted, and they don't know if they cracked the encryption.Black_Knight_00
They also don't know that they didn't, so why take the chance?

You got a pretty good point there, but I only have two games on steam, and no credit card linked :P. If I did have a bigger steam account, or a credit card linked, I would change my password though.
Avatar image for Black_Knight_00
Black_Knight_00

78

Forum Posts

0

Wiki Points

0

Followers

Reviews: 12

User Lists: 0

#44 Black_Knight_00
Member since 2007 • 78 Posts
[QUOTE="Black_Knight_00"][QUOTE="Loegi"]But the files they took were encrypted, and they don't know if they cracked the encryption.Loegi
They also don't know that they didn't, so why take the chance?

You got a pretty good point there, but I only have two games on steam, and no credit card linked :P. If I did have a bigger steam account, or a credit card linked, I would change my password though.

Yeah but why risk losing those 2 games? I'd still change it, it takes like 1 minute
Avatar image for KnightSkull
KnightSkull

1481

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

#45 KnightSkull
Member since 2011 • 1481 Posts

I changed my password as soon as I heard about this. I'm glad I don't have a card linked to my account, paypal FTW.

Avatar image for CarnageHeart
CarnageHeart

18316

Forum Posts

0

Wiki Points

0

Followers

Reviews: 0

User Lists: 0

#46 CarnageHeart
Member since 2002 • 18316 Posts
I use Steam infrequently enough that I should have deleted my account rather the leave personal data in it (the credit card is out of date) knowing that the hackers are attacking all and sundry. I'll correct that mistake soon.
Avatar image for c_rakestraw
c_rakestraw

14627

Forum Posts

0

Wiki Points

0

Followers

Reviews: 64

User Lists: 0

#47 c_rakestraw  Moderator
Member since 2007 • 14627 Posts

Just a heads-up: I'm un-sticking this. It's been long enough for the message to get out. No point in keeping this up anymore.