For the love of God...System Wars, it's like talking about charity with terrorists that shoot at you, darn trap. Yes it's been hacked for a few days, the Steam forums that is, if you're one of the sadly, few smart Steam users (verified account, steam guard, decent and different passwords for your accounts and emails) you won't have any problems, if you aren't, time to get paranoid and fix the flaws.
Im glad I've never purchased anything off of steam directly, just activation from store purchases....One of my friends is freaking out because he thinks his credit card info was stolen and an attempt to purchase has already been done......
Our Steam forums were defaced on the evening of Sunday, November 6. We began investigating and found that the intrusion goes beyond the Steam forums.
We learned that intruders obtained access to a Steam database in addition to the forums. This database contained information including user names, hashed and salted passwords, game purchases, email addresses, billing addresses and encrypted credit card information. We do not have evidence that encrypted credit card numbers or personally identifying information were taken by the intruders, or that the protection on credit card numbers or passwords was cracked. We are still investigating.
We don't have evidence of credit card misuse at this time. Nonetheless you should watch your credit card activity and statements closely.
While we only know of a few forum accounts that have been compromised, all forum users will be required to change their passwords the next time they login. If you have used your Steam forum password on other accounts you should change those passwords as well.
We do not know of any compromised Steam accounts, so we are not planning to force a change of Steam account passwords (which are separate from forum passwords). However, it wouldn't be a bad idea to change that as well, especially if it is the same as your Steam forum account password.
We will reopen the forums as soon as we can.
I am truly sorry this happened, and I apologize for the inconvenience.
For the love of God...System Wars, it's like talking about charity with terrorists that shoot at you, darn trap. Yes it's been hacked for a few days, the Steam forums that is, if you're one of the sadly, few smart Steam users (verified account, steam guard, decent and different passwords for your accounts and emails) you won't have any problems, if you aren't, time to get paranoid and fix the flaws.DanielDust
Read the story. The hack went beyond the forums....
Luckily I never even setup a Steam Forum account, so I need not worry personally, though I hope they get this sorted soon, I think I will change my steam login password none-the-less.
[QUOTE="murekkep"][QUOTE="kris9031998"]Just deleted Credit card number on steam. Hope i wasnt too late... How do you delete card number? Click on steam, Go into settings, Click view account history (upper right corner) press delete next to the last four digits on the right side.
My forum and store passwords are way different. Not worried there. The credit card info is something else....encrypted or not. Deleted my card, Starting to piss me off....first I need to change my passwords every 2 weeks because somebody got hacked....but now my CC ? That's a little too much.
I think it would be pointless to delete your credit card now. If the information's already out there, it's already out there. Well, unless you are going to get different account numbers I guess.
Just make sure when you buy something that it doesnt keep your info for the next time. Only takes a minute to write it in when you want ot buy something anyways.
Someone should find these hackers and chop their fingers off, and then someone should sue Steam for incompetence. That will save everyone time and money.
This is your best bet at this point. Make sure the passwords for your email and steam are different as well (as in, change one of them now if they aren't) and you should be fine.
This is your best bet at this point. Make sure the passwords for your email and steam are different as well (as in, change one of them now if they aren't) and you should be fine.
I don't think our accounts are at risk - Steam Guard shuts down anyone else's ability to log into your account. The only problem is the possible leak of credit card info, but they might not have taken anything, and it's all encrypted anyway. So...eh, I'm not too worried.
I guess Steam didn't learn anything from the PSN debacle. Either these hackers are too Uber Leet for companies to guard against, or their security protocols are just not adequate. Either way, there will be a reckoning. I am going to pray for these hackers... I'm praying that they get eaten by hogs. Painfully and slowly.
I guess Steam didn't learn anything from the PSN debacle. Either these hackers are too Uber Leet for companies to guard against, or their security protocols are just not adequate. Either way, there will be a reckoning. I am going to pray for these hackers... I'm praying that they get eaten by hogs. Painfully and slowly.
Garnog
Yeaaah.. Steam's security on this is a level up from PSN as of the hacks. If nothing else, the passwords and CC data are all hashed/salted and encrypted. No plaintext here!
I guess Steam didn't learn anything from the PSN debacle. Either these hackers are too Uber Leet for companies to guard against, or their security protocols are just not adequate.
Garnog
It's a bit different - for starters, Valve's passwords and CC info databases are encrypted, unlike Sony's.
Also, everything on Steam is fully functioning (besides the forum)...unlike the aftermath of Sony's hack, where PSN went down for a long while.
I guess Steam didn't learn anything from the PSN debacle. Either these hackers are too Uber Leet for companies to guard against, or their security protocols are just not adequate. Either way, there will be a reckoning. I am going to pray for these hackers... I'm praying that they get eaten by hogs. Painfully and slowly.
Makari
Yeaaah.. Steam's security on this is a level up from PSN as of the hacks. If nothing else, the passwords and CC data are all hashed/salted and encrypted. No plaintext here!
This is your best bet at this point. Make sure the passwords for your email and steam are different as well (as in, change one of them now if they aren't) and you should be fine.
[QUOTE="DanielDust"]For the love of God...System Wars, it's like talking about charity with terrorists that shoot at you, darn trap. Yes it's been hacked for a few days, the Steam forums that is, if you're one of the sadly, few smart Steam users (verified account, steam guard, decent and different passwords for your accounts and emails) you won't have any problems, if you aren't, time to get paranoid and fix the flaws.Johnny_Rock
Read the story. The hack went beyond the forums....
Everything is fine, if what I said there is in order, no need for paranoia when nothing was compromised, it's still "just a forum attack", and compromised forum accounts are nothing, our CCs will expire till they manage to find out the exact numbers, only those that left CC info on their account, should just check if everything is in order, everything is fine...
Steam is responsible for this and should be accountable for any misuse of your personal information. I'm ready to go legal by punishing these companies for their security flaws and allowing our personal information to be breached. It's ridiculous! We need to stand up and go after all companies not keeping up-2-date on security for our personal data. They're responsible for keeping our data secure.
Steam is responsible for this and should be accountable for any misuse of your personal information. I'm ready to go legal by punishing these companies for their security flaws and allowing our personal information to be breached. It's ridiculous! We need to stand up and go after all companies not keeping up-2-date on security for our personal data. They're responsible for keeping our data secure.NattyZilla
Im not surprised a person is threatening legal action :roll:
Steam is responsible for this and should be accountable for any misuse of your personal information. I'm ready to go legal by punishing these companies for their security flaws and allowing our personal information to be breached. It's ridiculous! We need to stand up and go after all companies not keeping up-2-date on security for our personal data. They're responsible for keeping our data secure.NattyZilla
...they did keep it secure, which was the gist of Gabe's post. if they can get at your personal data behind all that encryption, we've got much bigger problems in the world. :)
Steam is responsible for this and should be accountable for any misuse of your personal information. I'm ready to go legal by punishing these companies for their security flaws and allowing our personal information to be breached. It's ridiculous! We need to stand up and go after all companies not keeping up-2-date on security for our personal data. They're responsible for keeping our data secure.NattyZilla
Everything's hashed and encrypted, you can't wish for much more. The government has lost loads of laptops with unencrypted confidential data on them, why don't you go sue them first?
Log in to comment