Credit card info compromised in Steam hack
Credit card details of Steam users have been accessed by hackers - let's hope the encryption securing it can't be cracked.
Encrypted credit card information has been accessed by hackers who broke into the database of online gaming service Steam.
Valve, Steam's owner, said it has not seen any evidence of credit card misuse at the current time and had no evidence the encrypted details had been actually stolen.
"We learned that intruders obtained access to a Steam database in addition to the forums. This database contained information including user names, hashed and salted passwords, game purchases, email addresses, billing addresses and encrypted credit card information," said Valve's head Gabe Newell, in a Steam forum post.
"We do not have evidence that encrypted credit card numbers or personally identifying information were taken by the intruders, or that the protection on credit card numbers or passwords was cracked. We are still investigating."
We do not have evidence that encrypted credit card numbers or personally identifying information were taken by the intruders.
Despite no evidence indicating the hackers had used credit card data from the database, Valve still recommended users check their bank account activity and statements "closely."
"While we only know of a few forum accounts that have been compromised, all forum users will be required to change their passwords the next time they login," the company added. "If you have used your Steam forum password on other accounts you should change those passwords as well."
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
The company became aware of the hack when Steam forums were defaced on 6 November.
Steam is used to distribute games and letting gamers share information. It was recently offering downloads for a demo of the massively popular Football Manager 2012 title and RPG Skyrim is currently available from the service.
Gaming companies have been battered by hackers in the past year, as plenty of valuable data is held on such firms' servers.
Bethesda, the creator of Skyrim, was hit by LulzSec earlier this year. Sony, Epic Games and Nintendo have also been attacked.
Tom Brewster is currently an associate editor at Forbes and an award-winning journalist who covers cyber security, surveillance, and privacy. Starting his career at ITPro as a staff writer and working up to a senior staff writer role, Tom has been covering the tech industry for more than ten years and is considered one of the leading journalists in his specialism.
He is a proud alum of the University of Sheffield where he secured an undergraduate degree in English Literature before undertaking a certification from General Assembly in web development.
-
Pure Storage’s expanded partner ecosystem helps fuel Q3 growthNews The data storage vendor has announced a 16% year-over-year revenue hike in its latest earnings report, driven by continued channel and product investment
-
Partners have been ‘critical from day one’ at AWS, and the company’s agentic AI drive means they’re more important than everNews The hyperscaler is leaning on its extensive ties with channel partners and systems integrators to drive AI adoption
-
Scania admits leak of data after extortion attemptNews Hacker stole 34,000 files from a third-party managed website, trucking company says
-
Capita tells pension provider to 'assume' nearly 500,000 customers' data stolenCapita told the pension provider to “work on the assumption” that data had been stolen
-
Gumtree site code made personal data of users and sellers publicly accessibleNews Anyone could scan the website's HTML code to reveal personal information belonging to users of the popular second-hand classified adverts website
-
Pizza chain exposed 100,000 employees' Social Security numbersNews Former and current staff at California Pizza Kitchen potentially burned by hackers
-
83% of critical infrastructure companies have experienced breaches in the last three yearsNews Survey finds security practices are weak if not non-existent in critical firms
-
Identity Automation launches credential breach monitoring serviceNews New monitoring solution adds to the firm’s flagship RapidIdentity platform
-
Neiman Marcus data breach hits 4.6 million customersNews The breach took place last year, but details have only now come to light
-
Indiana notifies 750,000 after COVID-19 tracing data accessedNews The state is following up to ensure no information was transferred to bad actors
