Steam security issue revealed personal info to other users on XMas Day (fixed)

i hope someone tries to hack me and sees my empty paypal and steam wallet and leaves some money on my account after they feel bad
 
checked both my e-mail and credit card just to be sure
Nothing wrong on both so far. Doesn't remove the un-easy feeling it might still happen though.
 
I'd be wary of believing anyone posting Paypal receipts. Unless things have changed even if you have it set to remember your payment you still have to enter your PP password.
 
I just find it annoying people are dismissing everything as shopped WHEN multiple people across different websites are reporting monetary funds being used.

Yup. More embarrassing posting in this thread from people thinking they're being funny by mocking you.
 
Guide to unlink Valve from Paypal.

  1. Log in
  2. Access your settings through the cog in the upper right hand corner
  3. Click Preapproved payments
  4. Click Valve, corp
  5. Select cancel option

Serious question. Does Grief.exe work for Valve?

Simply posting as much information as I can find from viable sources that have complete knowledge of Valve's backend, api, and crack it open on a daily basis.
 
As far as w


I didn't see any either, maybe someone browsing caches or /v can confirm

LdhpdaZ.png


However, that information came from a community moderator.

Again, I'm not seeing any doxing on /v/. It's just shitposting and people being very homoerotic as usual.
 
Yes. Which makes me think the people posting charges to their steam account were just charged late for something they bought earlier. I've had steam charges take a couple of days to hit. Still, all the other shit leaked is a social engineering nightmare.

I don't have the 3 number verification thing anymore... I wish I did, but I've not had to put that in for at least 6 months now.
 
Not believing anything anyone posts until Valve has an official response.

Checked my bank account and my credit monitoring, nothing shady thank god.
 
If you have steam wallet balance though, they can use that right? As that doesn't require any code inputs, just a tickbox.

Yeah, it would be much easier for someone to purchase unwanted stuff with Steam wallet funds, but I suppose it would also keep track of who received the purchased items and Valve will likely be more amenable to rolling back that transaction in light of the situation.
 
In Light of the Steams shut down let us celebrate with some more steam games!

ModBot said:
Instructions for Polishin8r:
Press the quote button to the left of this PM, select the quoted text, copy, and paste in the thread. You can remove these lines from the version you paste.

Instructions for participants:
I am giving away 3 Steam keys. To enter this giveaway, send a PM to ModBot with any subject line. In the body, copy and paste the entire line from the message below that corresponds to the game you want. (if you include more than one game, you will be blocked from entering). Confused? Watch this GIF tutorial or ask for help.

ModBot Basics:
-
KjAOaDf.gif
Happy Holidays to all! Hope you got cool games, and if not, hope you win cool games in a giveaway!
- I really appreciate thank you messages, but please send them to me (Polishin8r, not ModBot!) via PM instead of in thread.
- Do not trade keys you win off-site to enrich yourself. Don't try to claim games you have no interest in collecting or playing. Don't claim games to give them to friends off-site.
- If the key is already taken you will not receive a reply. Replies may take a minute or two.

Rules for this Giveaway:
- This giveaway is a raffle. The winners will be selected by random draw 3 hours after the draw was created. Any games not claimed after that point will be given away first come first serve.



Viking: Battle for Asgard -- MB-DE2236D7C9678720 - Taken by Raijin_Cain. 14 entrants total.
Shadow Warrior Classic Redux- -- MB-4AAA4439021E26C1 - Taken by dr. apocalipsis. 1 entrants total.
Duke Nukem 3D: Megaton Edition -- MB-F10328179B2DD66E - Taken by Purkake4. 10 entrants total.


t1451092539z1.png
 
Not believing anything anyone posts until Valve has an official response.

Checked my bank account and my credit monitoring, nothing shady thank god.

Yeah I've not had any steam purchase emails or weird charges on my online banking, so I'm hoping I dodged a bullet.
 
As far as we know, it's just a caching error so no account changes can be made.

There have been some varying reports however, currently we are discussing the validity of charges being applied to people's accounts.



I didn't see any either, maybe someone browsing caches or /v can confirm.

LdhpdaZ.png


However, that information came from a community moderator.

Phone numbers were absolutely 100% exposed, I saw them with my own eyes. It relied on you having stored your billing address info at one point in Steam (so if you never did this you are definitely okay, and if you removed your billing details you may also be okay if Valve deletes your saved info), but all that info was exposed if you knew where to look.
 
Talk about a huge trust loss towards Valve from my point of view. They make so much money and still handle some of the most basic stuff like security and customer service like small time garage indie devs.

You had one job. I don't wanna have to worry about gaming accounts security during Christmas.
 
If you added a new card it would auto-fill your old information including address and phone number.

It seems people are just ignoring this, but it's been stated several times in the thread now.

That Steam Community Moderator clearly doesn't know shit.

I mean it's offline know, but people that would do shitty things with that info likely already have accessed it and probably have as much saved as possible.
 
I didn't get any e-mail from Steam about buying something when it was up. Does that mean that no one bought anything with my account? I can't check the bank account ATM.
 
What a monumental fuck up. Thankfully I don't ever store card or paypal information on Steam but I do have funds in my wallet. I've had no e-mails about newly-made transactions though so hopefully I'm safe.
 
A bit coincidental for just a caching error to happen on Christmas day when it's been OK all year round.

My guess is this is a targeted attempt, Christmas Day represents their best chance at inflicting the most damage with minimal to no staff presence.

A guy from IGN is even saying he has had charges to his account. Perhaps he is mistaken, but I'm doubting it.

The only reason I'm still not quite confirming them is it's possible they bought something in previous days and their financial institution is just logging the charge. No need to fear monger until we have absolute concrete proof.

My point being, even those who are meaning well could be using anecdotal information to come to a conclusion, including myself.

If you added a new card it would auto-fill your old information including address and phone number.

That's horrifying.
 
Talk about a huge trust loss towards Valve from my point of view. They make so much money and still handle some of the most basic stuff like security and customer service like small time garage indie devs.

You had one job. I don't wanna have to worry about gaming accounts security during Christmas.

I think there have always been lingering trust issues with Valve over CS problems, but this is going to cause them a lot of problems in the future.
 
He's just not losing his god damn head and going into 150% panic mode like everyone else. Going into panic mode does not help anyone currently. All it does is worry them to death.

Well we are talking about money here... Hard earned money that is open to some jerk who wants to purchase stuff because lolz. I don't know if you are compromised or have ever gone through identity theft.. But this is no calm matter at all and it irks me that some people are saying being level headed in a situation which could possibly ruin you for life is recommended... acting like this is some level headed situation. Wtf?

Like please don't.
 
...
I didn't see any either, maybe someone browsing caches or /v can confirm.
However, that information came from a community moderator.
Looks like GiantWaffle from twitch was able to see somebody else's full address and phone. AFAIK he was using the android steam app and not the PC client or website.
No idea if it is actually true, but worth checking if the andriod/ios apps leaked more information than the website/pc client.
 
Yes. Which makes me think the people posting charges to their steam account were just charged late for something they bought earlier. I've had steam charges take a couple of days to hit. Still, all the other shit leaked is a social engineering nightmare.

Steam stores the three digit code as well as the full credit card number. I've never had to add the CVV number when using a stored card on Steam.
 
So, uh...

I saw this thread and checked Steam before I read the part about not going onto Steam. But the main store page wasn't loading and when I tried to check account details it didn't load either, then I closed Steam because I read a little further. This was probably 20 or 30 minutes ago. Was my account info cached or was Steam down by the time I checked? Am I safe or not? AAAAAAAAAAAA
 
Top Bottom