SydLexia.com - The Forums :: View topic

Banned Joined: Sep 13 2008 Posts: 3129

I know this belongs in Video Games but it's a pretty big deal seeing as most of us use steam so I thought I should garner attention to this

Gabe wrote:

November 10th, 2011
Dear Steam Users and Steam Forum Users:

Our Steam forums were defaced on the evening of Sunday, November 6. We began investigating and found that the intrusion goes beyond the Steam forums.

We learned that intruders obtained access to a Steam database in addition to the forums. This database contained information including user names, hashed and salted passwords, game purchases, email addresses, billing addresses and encrypted credit card information. We do not have evidence that encrypted credit card numbers or personally identifying information were taken by the intruders, or that the protection on credit card numbers or passwords was cracked. We are still investigating.

We don’t have evidence of credit card misuse at this time. Nonetheless you should watch your credit card activity and statements closely.

While we only know of a few forum accounts that have been compromised, all forum users will be required to change their passwords the next time they login. If you have used your Steam forum password on other accounts you should change those passwords as well.

We do not know of any compromised Steam accounts, so we are not planning to force a change of Steam account passwords (which are separate from forum passwords). However, it wouldn’t be a bad idea to change that as well, especially if it is the same as your Steam forum account password.

We will reopen the forums as soon as we can.

I am truly sorry this happened, and I apologize for the inconvenience.

Gabe.

http://www.pcworld.com/businesscenter/article/243596/steam_gets_hacked_heres_how_to_keep_safe.html

----------------

I personally went and changed my password.

Posted: Nov 11 2011 07:03 am

Well at least the only credit card info I had on there was from a long cancelled card. I'll change my password though. I'll forget it just like I forgot my PSN one after I had to change it, but such is life I guess.

Joined: Jun 29 2010 Posts: 1818

If they follow "PSN standard" and give away some free games too, that'd be nice Smile

Joined: Dec 06 2007 Location: Connecticut Posts: 11244

Read the WHOLE article before freaking out. It is just the forums account.

The simple solution is to change one's forum password... which hopefully was different from the Steam service password.

Banned Joined: Sep 13 2008 Posts: 3129

GPFontaine wrote:

Read the WHOLE article before freaking out. It is just the forums account.

The simple solution is to change one's forum password... which hopefully was different from the Steam service password.

Read MY whole post before posting

from steam news by Gabe wrote:

We began investigating and found that the intrusion goes beyond the Steam forums.

We learned that intruders obtained access to a Steam database in addition to the forums. This database contained information including user names, hashed and salted passwords, game purchases, email addresses, billing addresses and encrypted credit card information. We do not have evidence that encrypted credit card numbers or personally identifying information were taken by the intruders, or that the protection on credit card numbers or passwords was cracked. We are still investigating.

Posted: Nov 11 2011 08:51 pm

Cowabunga, dude!

UsaSatsui's Youtube Channel · Posted: Nov 12 2011 02:23 am

Hack's pwning people left and right lately. If he keeps this up we're gonna need a new forum bitch.

Joined: Jun 08 2010 Location: Termina Field Posts: 1541

UsaSatsui wrote:

Hack's pwning people left and right lately. If he keeps this up we're gonna need a new forum bitch.

Well, that's not going to be me. (Or will it?)

Also, I'll change my Steam passcode once I get reliable Internet access (My laptop doesn't seem to want to connect to the Internet over WiFi, so I have to tether with my iPhone to get Internet access)

Joined: Oct 12 2007 Posts: 821

Good news about the encryption stuff. Still would keep an eye on passwords and credit card stuff though.

Edit: Don't know why the image is so small, working on fixing it.

Banned Joined: Sep 13 2008 Posts: 3129

Lol, that picture mentions free copies of Portal 2.

I just bought that for a friend who really wanted it

Posted: Nov 12 2011 06:36 am

Even though that information about the encryption is great, I still think that I'm gonna see what I can do to make sure that my information doesn't get stolen, since I used my debit card on one of my purchases and I'd rather not have my bank account cleared out. I know I'm being paranoid, but I don't give a crap. It'll help me sleep at night.

Joined: Dec 06 2007 Location: Connecticut Posts: 11244

Hacker was correct... it was more than the forums account...

As of today here is the breakdown:

Quote:

Encrypted data
* Your Steam password
* Your credit card information

Non-encrypted data
* Your username
* The list of games registered to your account
* Your e-mail address
* Your billing address

http://forums.steampowered.com/forums/showthread.php?t=2227097

It is important to note that while the databases were accessed, there was no evidence that they were copied.

I changed my passwords on my account and forums again.

Joined: Aug 04 2009 Posts: 2515

I would also recommend that you go into settings and then manage steam guard account security.y.

Specify that you will deauthorise other computers. This will only work if you use steam on one computer, i do so that it means if any other computer tries to access my account they will have to confirm via an email to my account, which they obviously don't have access to.

Banned Joined: Sep 13 2008 Posts: 3129

GPFontaine wrote:

Hacker was correct...

I almost sig'd that

Joined: Oct 12 2007 Posts: 821

So I am dumb and probably should have done more research into that image. General consensus on the internet is it is fake. It brings up a good point that as long as the encryption is good, your info should be fine, but it is no way official. Sorry for the inconvenience.

Joined: Dec 06 2007 Location: Connecticut Posts: 11244

I don't understand the resetting of Steam Guard. Isn't the point of it that if someone tried to authorize a new computer, it would email me? I have Steam Guard activated on five of my computers... it seems like a pain in the ass to remove those authorizations...

Banned Joined: Sep 13 2008 Posts: 3129

GPFontaine wrote:

I don't understand the resetting of Steam Guard. Isn't the point of it that if someone tried to authorize a new computer, it would email me? I have Steam Guard activated on five of my computers... it seems like a pain in the ass to remove those authorizations...

I think it's to eliminate the possibility of an extra computer you don't remember authorizing

Posted: Nov 14 2011 11:14 pm

A couple years ago, my steam account was actually hacked. I got it back after I submitted a claim to steam and then had a couple friends in my Clan get the account back through... shady means (read: tit's solved everything)

Following Alow's suggestion, just makes me feel a bit safer because it actually deauthorized any and all potential computers the account could have been on.

Joined: Dec 06 2007 Location: Connecticut Posts: 11244

Slayer1 wrote:

A couple years ago, my steam account was actually hacked. I got it back after I submitted a claim to steam and then had a couple friends in my Clan get the account back through... shady means (read: tit's solved everything)

Following Alow's suggestion, just makes me feel a bit safer because it actually deauthorized any and all potential computers the account could have been on.

Wouldn't I have received an email though from those computers?