Steam security issue revealed personal info to other users on XMas Day (fixed)

Valve may not have anyone with access to the PR credentials. Engineers should be on call always, PR not necessarily. (Not forgiving Valve or giving them a pass, just trying to understand why)

There should be someone with PR or above that has access to a computer and a phone to get a call from the engineers.
 
We just finished playing Phase 10. My PC isn't even on lol.
solid choice

Time to pull out some board games, have a nice cold Weizen and wait for all of this to blow over.

1339150917988.gif



And then rip Valve a fucking new one when the extent of the damage becomes known.
 
From the Steam forums:

Claus1978 (DK) said:
For paypal users, Valve has stated on twitter that it is only safe to remove it through paypal itself.

1. click the cog wheel in the upper right corner when logged in.
2. scroll down and look for a link like button with preapproved payments then click.
3. under the dropdown menu click on active and then click go.
4. click the one from steam and cancel it.
 
Jesus Christ I have two cards and I dont even remember which one is linked on Steam. Hopefully neither cause I hate linking cards to accounts.

Well past my bedtime so I cant stay up and monitor the credit cards either.

Fucking Hell Valve.
 
Seeing as how you could view a random person's account page without logging in, google's cache bots probably caught a copy of an unfortunate soul's page and cached it

Luckily, unless Google stores multiple versions of a page in its own cache, the page that allowed you to see people's full phone numbers and billing address was not cached by Google in a way that reveals anyone's information.
 
Man I'm so happy that I had a bad steam experience where I vowed never to buy directly from steam again (lagged when putting money in my wallet and steam customer service never replied to me when I wanted to take the second deposit back out).

Screw you valve customer service.

Thank you valve customer service!

It seems like you overreacted, but I guess it's good that this one potentially negative experience helps you rationalize your overreaction.
 
Guy in my Clan is saying on TS he was able to navigate to teh page where you could deposit funds in a wallet (not his own account) but backed the fuck out.


*no proof or source so feel free to dismiss at will as I think this would be more widespread if that was true*
 
There should be someone with PR or above that has access to a computer and a phone to get a call from the engineers.
Should be, but on a holiday they may not be near it, be on a plane, etc. Also, the engineers could be waiting to know the whole story before calling PR. No matter what it's still a massive cluster fuck though.
 
From the Steam forums:
Sounds like they are mistaking Steam DB for an official twitter.

You're just as bad as the people posting paypal pics dude, posting third party tweets that tell people not to remove their paypal or take other protection measures.. Seriously, just stop.

Those tweets only said not to try to remove your details via the steam accounts page which was in fact the correct advice.
 
no unauthorized purchases on my account, and i should be good since:
1. Cookies aren't being cached
2. I only use paypal for steam wallet
3. Every time I use paypal I have to enter my password.

Still, this is a PR/security nightmare
 
If it was a cache problem, does it mean it'll only affect those who visit specifically their account info page?
That's the current operating theory, yeah. Or at least where doing any account related activity when this caching thing went apeshit.
 
Am I safe if I didn't login today and I don't have my credit card or PayPal account saved ?

At least in the second part you should be safe, but is possible that people got your personal data: adress, phone, mail, account name.

So you should keep vigilant, regarding at least accounts who might use the same mail, for example.
 
I saw that some people were able to enter game/software licences on the same account details page with remove next to some games.

Can some licences be actually removed?
 
So is Steam down now? I wasn't charged for anything, unlinked my PayPal account through PayPal, and changed my PayPal password. I just want to play my games in offline mode.
 
Top Bottom