Steam Says Recent Leak Was Not a Breach of Its Systems
|
|
- Steam clarified that the recent leak tied to the storefront was not a breach of its systems.
- The leak only contained old text messages and one-time passwords, which cannot be used to breach the security of a Steam account.
- Steam is the leading digital distribution platform for PC games.
Steam released a statement explaining that the recent leak was not a breach of its systems. According to the digital storefront, the leaked data did not associate phone numbers with a Steam account, password information, payment information or other personal data.
It further clarified that old text messages that contained one-time passwords cannot be used to breach the security of a Steam account, as these are only valid for 15 minutes. Additionally, Steam also mentioned that “whenever a code is used to change your Steam email or password using SMS, you will receive a confirmation via email and/or Steam secure messages.”
While Steam advised users not to change passwords or phone numbers due to the leak, the storefront still recommended that users set up their Steam Mobile Authenticator.
On May 11, a LinkedIn post surfaced that talked about a threat actor selling the information of more than 89 million Steam users on a dark web forum. According to the post, they have confirmed that the leaked sample contains two-factor authentication SMS logs routed via Twilio. However, GamingOnLinux received a statement from Twilio confirming that the company was not breached.
Steam is a digital storefront initially released in September 2003. It’s the leading digital distribution platform for PC games. According to reports, Steam’s commission has reached over $3 billion in 2024.
