Valve confirms Steam data leak but denies it’s a serious problem
Valve confirms Steam data leak but denies it’s a serious problem
GameCentral
Published May 15, 2025 12:07pm
Updated May 15, 2025 12:07pm
Valve says there’s nothing to worry aboutSteam users are in a panic about a supposed data breach, but according to Valve nothing significant has actually happened.
Data breaches at big companies are hardly a rarity, in the video game world or elsewhere, so when talk of a ‘massive’ breach at Steam started to appear online it wasn’t necessarily that surprising.
Warnings spread that customers should immediately change their passwords, phone numbers, and payment details, with reports that personal data had been stolen by hackers.
However, according to Steam owner Valve, the whole story is overblown and only ‘older text messages’ have been accessed, that are no help in breaking into Steam accounts. As such, they insist that this is ‘NOT a breach of Steam systems’ and nothing is at risk.
The rumours of a breach started with a LinkedIn post which, for some reason, everyone decided to believe, even though the talk of a ‘dark web forum’ and the hacker demanding onlyfor ‘89 million user records’ sounded extremely made-up.
Valve’s explanation of the situation is confusingly written but it does seem to confirm that text messages were acquired illegally, even if they’re of no use to anyone.
The breach was supposedly achieved by getting access to two-factor authentication SMS logs, but as Valve points out those messages are only good for 15 minutes and according to them all the ones that have been leaked are old.
‘We’re still digging into the source of the leak, which is compounded by the fact that any SMS messages are unencrypted in transit and routed through multiple providers on the way to your phone,’ reads the statement on Steam.
More Trending
‘The leaked data did not associate the phone numbers with a Steam account, password information, payment information or other personal data. Old text messages cannot be used to breach the security of your Steam account, and whenever a code is used to change your Steam email or password using SMS, you will receive a confirmation via email and/or Steam secure messages.’
Importantly, they insist that: ‘You do not need to change your passwords or phone numbers as a result of this event.’
Given the extreme bad publicity that would result if Valve were found to be underplaying the leak there doesn’t seem any reason not to take their comments at face value, especially given the more absurd elements of the initial LinkedIn post.
As they point out though, you should always treat any security messages you have not requested as extremely suspicious. They also recommend the Steam Mobile Authenticator app for added security.
It sounds like Dr Evil made the ransom demandsEmail gamecentral@metro.co.uk, leave a comment below, follow us on Twitter, and sign-up to our newsletter.
To submit Inbox letters and Reader’s Features more easily, without the need to send an email, just use our Submit Stuff page here.
For more stories like this, check our Gaming page.
GameCentral
Sign up for exclusive analysis, latest releases, and bonus community content.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply. Your information will be used in line with our Privacy Policy
#valve #confirms #steam #data #leak
Valve confirms Steam data leak but denies it’s a serious problem
Valve confirms Steam data leak but denies it’s a serious problem
GameCentral
Published May 15, 2025 12:07pm
Updated May 15, 2025 12:07pm
Valve says there’s nothing to worry aboutSteam users are in a panic about a supposed data breach, but according to Valve nothing significant has actually happened.
Data breaches at big companies are hardly a rarity, in the video game world or elsewhere, so when talk of a ‘massive’ breach at Steam started to appear online it wasn’t necessarily that surprising.
Warnings spread that customers should immediately change their passwords, phone numbers, and payment details, with reports that personal data had been stolen by hackers.
However, according to Steam owner Valve, the whole story is overblown and only ‘older text messages’ have been accessed, that are no help in breaking into Steam accounts. As such, they insist that this is ‘NOT a breach of Steam systems’ and nothing is at risk.
The rumours of a breach started with a LinkedIn post which, for some reason, everyone decided to believe, even though the talk of a ‘dark web forum’ and the hacker demanding onlyfor ‘89 million user records’ sounded extremely made-up.
Valve’s explanation of the situation is confusingly written but it does seem to confirm that text messages were acquired illegally, even if they’re of no use to anyone.
The breach was supposedly achieved by getting access to two-factor authentication SMS logs, but as Valve points out those messages are only good for 15 minutes and according to them all the ones that have been leaked are old.
‘We’re still digging into the source of the leak, which is compounded by the fact that any SMS messages are unencrypted in transit and routed through multiple providers on the way to your phone,’ reads the statement on Steam.
More Trending
‘The leaked data did not associate the phone numbers with a Steam account, password information, payment information or other personal data. Old text messages cannot be used to breach the security of your Steam account, and whenever a code is used to change your Steam email or password using SMS, you will receive a confirmation via email and/or Steam secure messages.’
Importantly, they insist that: ‘You do not need to change your passwords or phone numbers as a result of this event.’
Given the extreme bad publicity that would result if Valve were found to be underplaying the leak there doesn’t seem any reason not to take their comments at face value, especially given the more absurd elements of the initial LinkedIn post.
As they point out though, you should always treat any security messages you have not requested as extremely suspicious. They also recommend the Steam Mobile Authenticator app for added security.
It sounds like Dr Evil made the ransom demandsEmail gamecentral@metro.co.uk, leave a comment below, follow us on Twitter, and sign-up to our newsletter.
To submit Inbox letters and Reader’s Features more easily, without the need to send an email, just use our Submit Stuff page here.
For more stories like this, check our Gaming page.
GameCentral
Sign up for exclusive analysis, latest releases, and bonus community content.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply. Your information will be used in line with our Privacy Policy
#valve #confirms #steam #data #leak
·1 Ansichten