November 11, 2011, 12:39PM

Steam’s 35 Million Users Compromised in Hack

SteamGamers who use the digital distribution network Steam were warned that their account information may have been exposed to hackers following a compromise of the company's Web page and back end databases.  The incident yielded a slew of sensitive customer information, including user’s passwords and encrypted credit card numbers, Steam said.

The warning came after an investigation of a Web site defacement  that affected Steam's forums on November 6th. Hackers were able to bypass the message boards and access the site’s database, according to a message sent to the site’s users last night by Steam co-founder Gabe Newell.

The database contained customer’s user names, hashed and salted passwords, game purchases, email addresses, billing addresses and encrypted credit card numbers, according to the note.

Newell urged users to keep tabs on their credit card activity and their account statements, but said that there’s no proof attackers took any sensitive information, as a precaution. 

As a result of the hack, all forum users will be required to change their passwords upon logging in, while regular users of Steam are being encouraged to do the same, especially if they use the same password on both accounts.

While it remains to be seen how much personal information was actually swiped from Steam’s database and how well certain passwords and credit card numbers were encrypted, it of course recalls Playstation Network’s mammoth breach from earlier this year.

When hackers made off with the information of more than 77 million members of the video gaming platform worldwide in April, it left the network reeling to cover its tracks and make good on security after a series of embarrassing missteps.

Commenting on this Article is closed.

Comments

Last night, I tried taking a look at the Steam forums and was presented with a notice that my password was old and needed to be changed.  They directed me to a page to do so.  That page is unencrypted.

let me guess, SQL injection?

has anyone claimed responsibility?

Well, Steam forums didn't automatically prompt me to change my password when I logged in a moment ago - but I've gone ahead and done it manually for obvious reasons.

really its true i am also the victim of that pls users be aware

If it wasn't you, and it wasn't me, it was those other guys...

    I was hacked and someone other then me sent e-mails with porn / naked women and posting it as me I was appalled at this news. I expected my account to be secure..This is not the best situation to be put in. These hackers should be traced somehow when it comes to Face Books security vulnerabilities. We should be more protected.

 

Copyright © 2012 threatpost.com | Terms of Service | Privacy