Steam database hacked

By Punk^·
Sunday, the 6th of November the Steam forums were shut down, due to it being defaced and further investigation revealed that the intrusion went beyond the forums.
In addition to the forums being defaced, the intruders also gained access to a database containing user names, hashed and salted passwords, game purchases, email addresses, billing addresses and encrypted credit card information.
At the moment, Steam has no evidence that the intruders took the information, since no infected steam accounts has turned up or any signs of credit cards being abused.

Because of Steam Guard, the intruders shouldn't be able to at least access your account, but to make sure you should consider changing your password as well as monitor you billing account closely for a while in case the intruders manage to decrypt the credit card information.

We will update this post, whenever Valve releases more information about the attack.

If you want to read the full statement given by Gabe Newell, read the extended post.

Comments

You need to be logged in to post a comment.

11/11/2011 03:57:00

Sad!

11/11/2011 04:01:00

thx for posting punk!

11/11/2011 05:03:00

uii

11/11/2011 05:28:00

pw changed

11/11/2011 07:01:00

O.O!

11/11/2011 07:25:00

thx alot Punk!

11/11/2011 08:14:00

good job punk.

11/11/2011 08:34:00

fking hackers

11/11/2011 10:09:00

[i]Ohh this is realy shit.I hope to find more information about this problem.This can happen in anywhere on any Forum good job [flag]dk[/flag][b]Punk^[/b][/i]

11/11/2011 10:18:00

thx alot for posting punk :)

11/11/2011 11:05:00

Thanks Punk^! <3 Fucking HACKERS!

11/11/2011 11:09:00

fuckin` hackers

11/11/2011 11:13:00

About time they got owned.

11/11/2011 11:15:00

Thanks for posting this Punk

ivansky
11/11/2011 11:58:00

thanks,changing information from steam account now..

11/11/2011 12:00:00

thanks itachi^

11/11/2011 12:05:00

[flag]DK[/flag][color=#ff0000][b]Punk^[/b][/color]thank you and I dont like any hackers!

11/11/2011 12:11:00

@ finzEr ;-) I did see itachi's post but I was planning on posting this anyway ;-)

11/11/2011 12:17:00

cheers then :)

11/11/2011 12:48:00

fuck yep! my acc is worthless :D so i dont worry :E

11/11/2011 13:20:00

Punk as always on the spot! Thank you! :)

11/11/2011 13:44:00

Thanks for posting, Punk! pw and secret question changed

11/11/2011 14:54:00

[size=15]ANONYMOUS ............changed the target![/size] :lol:

11/11/2011 15:19:00

Have fun :)

11/11/2011 15:48:00

We are Anonymous. We are Legion. We do not forgive. We do not forget. Expect us - always. Thank you for informing us Punk^! My password is so awesome, I don't want to change it :<

11/11/2011 16:26:00

Woah.. Thanks for the information, I was not aware of this. Thanks again.

11/11/2011 16:40:00

@Perdo I thought the same joke when I read the date and the tittle haha :P

11/11/2011 17:38:00

pw changed ! tnx punk

11/11/2011 17:59:00

this has nothing to do with anonymous

11/11/2011 20:12:00

(This is only forumaccounts and _NOT_ steam accounts btw)

11/11/2011 20:25:00

The database they entered is also for steam accounts as far as I can tell Moxx.

11/11/2011 20:27:00

@Moxx, if I'm not reading that announcement wrong on Steam site, they say that the hackers got their way to Steam database (steam accounts, pws, credit card details etc, everything encrypted), but they think hackers didn't stole those. But it might be possible if they hided their traces well. Hopely not.

11/11/2011 20:56:00

@jusuuh and Punk^: Yes, steam database over the steam forum. As far as I know you have to register on the forums if you want to post there, your steam account wouldnt work. not sure tho ^^

11/11/2011 21:01:00

yea jusuuh is right, they may have had access to encrypted data including credit card and account info, so you should go safemode and change your pw, monitor credit card, etc. Here's a pic taken of /v/, so to speak it could be complete rubbish, so dont overestimate it: http://i.imgur.com/Rr95z.png if thats actually the truth and they use AES256 i can assure you nothing is going to happen with your info since it would take several years to decrypt that with brute force even with gov computers. Not sure if the additional text about DOTA2 and Portal 2 makes it less trustworthy because my brain really wants it to be true D:

11/11/2011 21:11:00

"[b]We do not know of any compromised Steam accounts[/b], so we are not planning to force a change of Steam account passwords ([u]which are separate from forum passwords[/u]). However, it wouldn’t be a bad idea to change that as well, especially if it is the same as your Steam forum account password."

11/11/2011 21:11:00

never doubt me.

11/11/2011 21:54:00

Well peps with less that 3 games shouldn't worry. And yea, stay cool, Valve will fix this in few days, and I HIGHLY doubt any accounts will be damned or CC infos used.

11/11/2011 22:06:00

Only hacker can detect hackers, so steam has its hackers and do not hate them :) pw changed. Tnx for the notification

11/11/2011 22:39:00

This anger is what I felt when KAYNE hacked my hotmail.... I really hate hackers...

11/11/2011 22:54:00

i rly love hackers :)

12/11/2011 20:13:00

All I know is I want a god damn free copy of Portal and Dota2.. fucking gabeN fat motherfucker..

13/11/2011 03:52:00

<deleted>

15/11/2011 18:20:00

nice job! (on the hacking.)