Steam Hacked

Kim · 11-10-2011, 05:53 PM

I'll post a source when I'm feeling less lazy, but sounds like Steam was hacked and encrypted password, credit card, and account info was stolen.

Change your passwords, yo.

Here ya go: http://www.rockpapershotgun.com/2011.../steam-hacked/

The Artist Formerly Known as Hawk · 11-10-2011, 06:51 PM

I don't even know what my password is to get in and change it. Fortunately though after the whole PSN fiasco I got my debit card renewed so my Steam details are out of date anyway now.

**Revising Ocelot** · 11-10-2011, 06:56 PM

If you're not already using Steam Guard, use it. It pings your email with a confirmation code whenever you (or someone else) tries to logon Steam from a different computer. In fact, Steam Guard actually kicked in when I first tried to use Steam after installing a different motherboard in my PC, so it definitely works.

I don't remember the exact procedure to set it up, but you can find it in the Steam client in View > Settings > Account.

All sensitive information like passwords, cards and so on were encrypted, "hashed and salted"* so in theory it should be fine. Going to keep an eye on my debit card statement over the next few days regardless.

*Insert Gaben Fat Joke Here

rpgdemon · 11-10-2011, 06:59 PM

From what it looks like, only the Forum was affected? But somehow they also got credit card info?

I can't even remember my Steam password, but I'm pretty sure it's unique to Steam, at least.

Edit: Though, this does make me happy about never storing credit card data with anyone. I hate it when things automatically save it, since I then have to go in and clear it out. For the slight convenience of not having to type stuff in, it's not worth the risk.

**Revising Ocelot** · 11-10-2011, 07:01 PM

Quote:

Originally Posted by rpgdemon

From what it looks like, only the Forum was affected? But somehow they also got credit card info?

"We learned that intruders obtained access to a Steam database in addition to the forums."

Krylo · 11-10-2011, 09:37 PM

Quote:

Originally Posted by rpgdemon

it's not worth the risk.

The risk that you might, one day, have to politely request a new credit and/or debit card?

Magus · 11-11-2011, 12:03 AM

Quote:

Originally Posted by Krylo

The risk that you might, one day, have to politely request a new credit and/or debit card?

Well pretty much everyone who has had their identity stolen says it's a total nightmare to get the charges on the card reversed, the damage to your credit reversed, etc. Like a nightmarish merry-go-round of suckage. So yeah I tend not to store my credit card info on these websites either. I buy things so infrequently that typing in a 12 digit number every order doesn't seem like that big of a hassle.

Like insofar as I'm annoyed my password might be compromised (because like a dummy I tend to use the same one on more than one online website), I'm at least pretty much assured I don't have to worry about my credit card info getting stolen because I never stored it on Steam's server.

Flarecobra · 11-10-2011, 07:36 PM

I note there's an option to "Deautherize all other computers", so I got that selected for now.

Magus · 11-10-2011, 07:57 PM

Quote:

Originally Posted by Flarecobra

I note there's an option to "Deautherize all other computers", so I got that selected for now.

Glad to hear about this. I'm kind of annoyed that all these ancillary services I hardly ever use are getting hacked. I forget what the last one was, another one of these things, pretty recently...

mauve · 11-10-2011, 08:06 PM

Hm. I haven't bought anything from Steam with a credit card in at least a year, maybe longer. Do you suppose my credit card number is still on file there?

11-10-2011, 05:53 PM	#1
Kim adorable Join Date: Sep 2007 Posts: 12,950	Steam Hacked I'll post a source when I'm feeling less lazy, but sounds like Steam was hacked and encrypted password, credit card, and account info was stolen. Change your passwords, yo. Here ya go: http://www.rockpapershotgun.com/2011.../steam-hacked/ __________________ this post is about how to successfully H the Kimmy

11-10-2011, 06:56 PM	#3
Revising Ocelot Douchebag Join Date: Sep 2008 Location: Probably somewhere in England. Posts: 1,897	If you're not already using Steam Guard, use it. It pings your email with a confirmation code whenever you (or someone else) tries to logon Steam from a different computer. In fact, Steam Guard actually kicked in when I first tried to use Steam after installing a different motherboard in my PC, so it definitely works. I don't remember the exact procedure to set it up, but you can find it in the Steam client in View > Settings > Account. All sensitive information like passwords, cards and so on were encrypted, "hashed and salted"* so in theory it should be fine. Going to keep an eye on my debit card statement over the next few days regardless. *Insert Gaben Fat Joke Here __________________ magic sucks

11-10-2011, 06:59 PM	#4
rpgdemon Not a Taco Join Date: May 2005 Posts: 3,313	From what it looks like, only the Forum was affected? But somehow they also got credit card info? I can't even remember my Steam password, but I'm pretty sure it's unique to Steam, at least. Edit: Though, this does make me happy about never storing credit card data with anyone. I hate it when things automatically save it, since I then have to go in and clear it out. For the slight convenience of not having to type stuff in, it's not worth the risk. __________________ I did a lot of posting on here as a teenager, and I was pretty awful. Even after I learned, grew up, and came to be on the right side of a lot of important issues, I was still angry, abrasive, and generally increased the amount of hate in the world, in pretty unacceptable ways. On the off chance that someone is taking a trip down memory lane looking through those old threads, I wanted to devote my signature to say directly to you, I'm sorry. Thank you for letting me be better, NPF. Last edited by rpgdemon; 11-10-2011 at 07:03 PM.

11-10-2011, 07:36 PM	#8
Flarecobra Burn. Join Date: Dec 2003 Location: Classified Posts: 11,017	I note there's an option to "Deautherize all other computers", so I got that selected for now. __________________ "Only the fool wishes to go into battle to beat someone for the satisfaction of beating someone." -A Thousand Sons Rules. Read them, know them, love them.

11-10-2011, 08:06 PM	#10
mauve So Dreamy Join Date: Apr 2005 Location: Someplace magical Posts: 6,863	Hm. I haven't bought anything from Steam with a credit card in at least a year, maybe longer. Do you suppose my credit card number is still on file there? __________________ Yoo Hoo!