Valve has dismissed widespread experiences of an information breach that supposedly compromised the account particulars of over 89 million Steam customers.
In a quick however agency put up, Valve mentioned it has examined the leaked information and confirmed that Steam’s programs had not been breached, and customers didn’t want to vary their passwords or cellphone numbers.
The leak consisted of previous textual content messages containing one-time authentication codes that had all expired. These had been linked to the cellphone numbers they had been despatched to, however the cellphone numbers weren’t linked to any account particulars.
“The leaked information didn’t affiliate the cellphone numbers with a Steam account, password data, fee data or different private information,” Valve mentioned. “Outdated textual content messages can’t be used to breach the safety of your Steam account, and each time a code is used to vary your Steam e mail or password utilizing SMS, you’ll obtain a affirmation by way of e mail and/or Steam safe messages.
“You do not want to vary your passwords or cellphone numbers because of this occasion. It’s a good reminder to deal with any account safety messages that you haven’t explicitly requested as suspicious.”
Valve mentioned it has not decided the supply of the leak, noting that SMS messages like these leaked are unencrypted and go by means of a number of suppliers. Earlier experiences had recommended {that a} vendor utilized by Valve to ship the authentication codes was the supply.
In accordance with the preliminary experiences, equivalent to this LinkedIn put up by Underdark.ai, the info had been posted on the darkish net on the market at a value of $5,000.
So, we will all relaxation straightforward. But it surely’s a superb reminder to activate two-factor authentication for Steam (and all of your on-line accounts), and to be suspicious of unsolicited messages.
