Steam confirmed hacked. Change passwords.

[capcom_suicide]

http://www.eurogamer.net/articles/2011-11-10-valve-confirms-steam-security-breach

Mentioned in Origin thread, but absolutley deserves own thread.

For those with 24/7 access to your steam client, you CANNOT change password from their web browser.

Online security in gaming is becoming a bloody joke.

[Family Fry]

Doesn't steam have a secure key, so that if someone tries to access your account on a different pc/ip it emails a code to the registered email address and won't allow access until you enter it?
I'm sure it has to be activated or turned on first though.

[Daragon]

Doesn't steam have a secure key, so that if someone tries to access your account on a different pc/ip it emails a code to the registered email address and won't allow access until you enter it?
I'm sure it has to be activated or turned on first though.

That's right. but the ****ing system is too efficient for me, because I have to do it EVERY BLEEDING TIME I WANT TO BUY ANYTHING, even from the same computer

[elaniel]

Can't remember my Steam password so entered my email address for a reminder about 8 hours ago (twice). Still not received a password reset, so I'm stuck for now.

[Soundwave]

Erm if you haven't ever bought anything from Steam is this a big deal??

I used my Steam account to install Half Life 2 & Counterstrike source & I haven't gamed on a PC since then so can't remember any of my details at all.

Neil

[Silvergun X]

I was discussing this yesterday evening with Shakey_Jake.

I don't think this is a major issue for the reason that the data they had access to (Note: They explicitly mention there's no evidence of credit card misuse) was salted as well as hashed, so the passwords and details, if they WERE taken, certainly aren't in a readable form even if they break the hash encryption which isn't exactly difficult.

Granted, this kind of information shouldn't be on the same server as outdated forum software that can be exploited. Either that, or they need better server-to-server security internally, but a lot of what they would've seen is likely to be unusable.

Lessons to be learned for sure on VALVe's part, but I honestly don't think this will result in mass account hackings and credit cards being exploited.

[Escape-To-88]

Online security in gaming is becoming a bloody joke.

It seems as easy to hack for some people as Facebook!

Time for a password change - ridiculous.

[egparadigm]

Cheers for the heads up.

[FelixofMars]

I have bought on steam but, I haven't ever connected a card. I just add in the one I want to pay from if I need to buy something there and then. seems like it was a GOOD idea.

[charlesr]

Installs steam. changes really old password. Uninstall steam.