http://www.industrygamers.com/news/steam-users-credit-cards-and-other-information-stolen/http://www.rockpapershotgun.com/2011/11/10/steam-hacked/Steam recently admitted that its forums suffered a security breach, but the problem runs much deeper unfortunately. Steam users' accounts have been compromised, as the entire database, including credit card data, was accessed. This is sadly reminiscent of Sony's massive PSN breach, but at least Valve is letting customers know much quicker than Sony did. IndustryGamers just received the following letter from Valve's Gabe Newell:
“Our Steam forums were defaced on the evening of Sunday, November 6. We began investigating and found that the intrusion goes beyond the Steam forums.”
We learned that intruders obtained access to a Steam database in addition to the forums. This database contained information including user names, hashed and salted passwords, game purchases, email addresses, billing addresses and encrypted credit card information. We do not have evidence that encrypted credit card numbers or personally identifying information were taken by the intruders, or that the protection on credit card numbers or passwords was cracked. We are still investigating.
Keep an eye on your credit card statements... and if you haven't set up your steam account for Steam Guard (it sends an email every time your account is accessed from a new machine) now would be a good time to do that. And I hope you have different passwords for your Steam and email accounts.