Send News. Want a reply? Read this. More in the FAQ.   News Forum - All Forums - Mobile - PDA - RSS Headlines  RSS Headlines   Twitter  Twitter
Customize
User Settings
Styles:
LAN Parties
Upcoming one-time events:

Regularly scheduled events

Steam Forum Downtime Follow-up; Steam Also Breached

Valve confirms indications from earlier this week that the downtime on the Steam Users' Forums was the result of a break-in, revealing that the Steam service itself also suffered an intrusion. Here is a message from Valve's Gabe Newell explaining the situation:

Dear Steam Users and Steam Forum Users,

Our Steam forums were defaced on the evening of Sunday, November 6. We began investigating and found that the intrusion goes beyond the Steam forums.

We learned that intruders obtained access to a Steam database in addition to the forums. This database contained information including user names, hashed and salted passwords, game purchases, email addresses, billing addresses and encrypted credit card information. We do not have evidence that encrypted credit card numbers or personally identifying information were taken by the intruders, or that the protection on credit card numbers or passwords was cracked. We are still investigating.

We don't have evidence of credit card misuse at this time. Nonetheless you should watch your credit card activity and statements closely.

While we only know of a few forum accounts that have been compromised, all forum users will be required to change their passwords the next time they login. If you have used your Steam forum password on other accounts you should change those passwords as well.

We do not know of any compromised Steam accounts, so we are not planning to force a change of Steam account passwords (which are separate from forum passwords). However, it wouldn't be a bad idea to change that as well, especially if it is the same as your Steam forum account password.

We will reopen the forums as soon as we can.

I am truly sorry this happened, and I apologize for the inconvenience.

Gabe.

View
20. Re: Steam Forum Downtime Follow-up; Steam Also Breached Nov 10, 2011, 18:34 Spaced
 
Anything exposed to the net can be hacked/cracked into, it often happens to outfits like Steam because they are the biggest target (gets the hackers the most press/prestige and data). Sounds like Valve had appropriate protections in place and is doing what they can. As many around here know, I am not a fan of the Steam concept at all, I do not approve of a global net-nanny controlling everyone's PC gaming purchases and PC game libraries due to this potential problem and others. No one entity should have the kill switch on the software you pay for and no one should be required to buy a game from one 3rd party DRM service exactly for reasons like this. But I'm not going to criticize them about anything they did wrong as this was bound to happen (and bound to again with potentially more success as the hackers likely learned with this attack) and it appears they had taken appropriate security steps to protect their users as best they could. They are the #1 target for attacks like this and it's just a matter of time.

Developers should -never- force Steam to be used with their software (many don't and let me buy their software direct - Thank You). Offer Steam as an option, but do -not- require it and make sure we can purchase and use your software entirely independent of Steam. This way, we will still have access to the software we pay for, we don't need a permission slip from a 3rd party to use it, no net-nanny has the kill switch to our game library (whether flipped intentionally or unintentionally), and our private payment information isn't all housed in one location as a prime target for thieves. The fault is entirely with the hackers, but the gamer's required dependence on Steam for purchasing and using the games they buy raises the risk for everyone involved while also restricting access and control for the customer. Steam should always be optional, never required, especially for purchasing.
 
Previous Post Next Post Reply Quote Edit Delete Report
 
    Date Subject Author
  1. Nov 10, 17:44 Re: Steam Forum Downtime Follow-up; Steam Also Breached StingingVelvet
  21. Nov 10, 18:36  Re: Steam Forum Downtime Follow-up; Steam Also Breached DrEvil
  49. Nov 10, 20:45   Waiting to warn is irresponsible. I've Got The News Blues
  53. Nov 10, 21:29    Re: Waiting to warn is irresponsible. Mordecai Walfish
  54. Nov 10, 21:40     Re: Waiting to warn is irresponsible. CJ_Parker
  66. Nov 11, 05:08      Re: Waiting to warn is irresponsible. Fibrocyte
  67. Nov 11, 05:36       removed CJ_Parker
  68. Nov 11, 06:30        Re: Waiting to warn is irresponsible. Prez
  57. Nov 10, 21:56     Re: Waiting to warn is irresponsible. I've Got The News Blues
  2. Nov 10, 17:45 Re: Steam Forum Downtime Follow-up; Steam Also Breached dardin
  3. Nov 10, 17:46  Re: Steam Forum Downtime Follow-up; Steam Also Breached Rattlehead
  4. Nov 10, 17:46   Re: Steam Forum Downtime Follow-up; Steam Also Breached PHJF
  23. Nov 10, 18:38  Re: Steam Forum Downtime Follow-up; Steam Also Breached Longswd
  5. Nov 10, 17:48 Re: Steam Forum Downtime Follow-up; Steam Also Breached Mashiki Amiketo
  7. Nov 10, 17:53  Re: Steam Forum Downtime Follow-up; Steam Also Breached killer_roach
  8. Nov 10, 17:54   Re: Steam Forum Downtime Follow-up; Steam Also Breached Overon
  10. Nov 10, 17:59    Re: Steam Forum Downtime Follow-up; Steam Also Breached Mashiki Amiketo
  30. Nov 10, 19:09   Re: Steam Forum Downtime Follow-up; Steam Also Breached Talisorn
  6. Nov 10, 17:50 Re: Steam Forum Downtime Follow-up; Steam Also Breached Aero
  48. Nov 10, 20:18  Re: Steam Forum Downtime Follow-up; Steam Also Breached I've Got The News Blues
  9. Nov 10, 17:56 Re: Steam Forum Downtime Follow-up; Steam Also Breached jacobvandy
  11. Nov 10, 18:05 Re: Steam Forum Downtime Follow-up; Steam Also Breached Techie714
  12. Nov 10, 18:10  Re: Steam Forum Downtime Follow-up; Steam Also Breached Mashiki Amiketo
  13. Nov 10, 18:12   Re: Steam Forum Downtime Follow-up; Steam Also Breached Techie714
  14. Nov 10, 18:16    Re: Steam Forum Downtime Follow-up; Steam Also Breached Overon
  16. Nov 10, 18:26     Re: Steam Forum Downtime Follow-up; Steam Also Breached Razumen
  27. Nov 10, 18:45      Re: Steam Forum Downtime Follow-up; Steam Also Breached Quboid
  34. Nov 10, 19:30       Re: Steam Forum Downtime Follow-up; Steam Also Breached Razumen
  36. Nov 10, 19:35      Re: Steam Forum Downtime Follow-up; Steam Also Breached Wildone
  39. Nov 10, 19:42       Re: Steam Forum Downtime Follow-up; Steam Also Breached Icewind
  40. Nov 10, 19:48        Re: Steam Forum Downtime Follow-up; Steam Also Breached Beelzebud
  47. Nov 10, 20:12         Re: Steam Forum Downtime Follow-up; Steam Also Breached bfg9000
  41. Nov 10, 19:49        Re: Steam Forum Downtime Follow-up; Steam Also Breached Wildone
  43. Nov 10, 19:51         Re: Steam Forum Downtime Follow-up; Steam Also Breached Wildone
  17. Nov 10, 18:29     Re: Steam Forum Downtime Follow-up; Steam Also Breached Mashiki Amiketo
  19. Nov 10, 18:31     Re: Steam Forum Downtime Follow-up; Steam Also Breached Paketep
>> 20. Nov 10, 18:34    Re: Steam Forum Downtime Follow-up; Steam Also Breached Spaced
  18. Nov 10, 18:30  Re: Steam Forum Downtime Follow-up; Steam Also Breached jimnms
  22. Nov 10, 18:37   Re: Steam Forum Downtime Follow-up; Steam Also Breached Prez
  25. Nov 10, 18:42    Re: Steam Forum Downtime Follow-up; Steam Also Breached StingingVelvet
  26. Nov 10, 18:45     Re: Steam Forum Downtime Follow-up; Steam Also Breached Mashiki Amiketo
  28. Nov 10, 18:46     Re: Steam Forum Downtime Follow-up; Steam Also Breached Razumen
  29. Nov 10, 18:56      Re: Steam Forum Downtime Follow-up; Steam Also Breached StingingVelvet
  55. Nov 10, 21:52     Re: Steam Forum Downtime Follow-up; Steam Also Breached Prez
  58. Nov 10, 22:07      Re: Steam Forum Downtime Follow-up; Steam Also Breached nin
  24. Nov 10, 18:39  Re: Steam Forum Downtime Follow-up; Steam Also Breached DrEvil
  15. Nov 10, 18:25 Re: Steam Forum Downtime Follow-up; Steam Also Breached HorrorScope
  38. Nov 10, 19:40  Re: Steam Forum Downtime Follow-up; Steam Also Breached Flatline
  45. Nov 10, 20:06   Re: Steam Forum Downtime Follow-up; Steam Also Breached HorrorScope
  31. Nov 10, 19:12 Re: Steam Forum Downtime Follow-up; Steam Also Breached Creston
  32. Nov 10, 19:13 Re: Steam Forum Downtime Follow-up; Steam Also Breached Dades
  52. Nov 10, 21:21  Thank Gabe for limited liabiility agreements! I've Got The News Blues
  33. Nov 10, 19:21 Re: Steam Forum Downtime Follow-up; Steam Also Breached Creston
  35. Nov 10, 19:31  Re: Steam Forum Downtime Follow-up; Steam Also Breached [VG]Reagle
  37. Nov 10, 19:35  Re: Steam Forum Downtime Follow-up; Steam Also Breached Flatline
  44. Nov 10, 19:54  Re: Steam Forum Downtime Follow-up; Steam Also Breached Mashiki Amiketo
  50. Nov 10, 20:59  Gabe's ass is well covered by your head. I've Got The News Blues
  51. Nov 10, 21:21   Re: Gabe's ass is well covered by your head. nin
  59. Nov 10, 23:01    Re: Gabe's ass is well covered by your head. RollinThundr
  60. Nov 10, 23:16     Re: Gabe's ass is well covered by your head. Prez
  61. Nov 10, 23:44     Re: Gabe's ass is well covered by your head. Dades
  62. Nov 10, 23:55      Re: Gabe's ass is well covered by your head. elefunk
  64. Nov 11, 01:35      Re: Gabe's ass is well covered by your head. RollinThundr
  65. Nov 11, 02:04     Re: Gabe's ass is well covered by your head. Krovven
  42. Nov 10, 19:50 Re: Steam Forum Downtime Follow-up; Steam Also Breached Mordecai Walfish
  46. Nov 10, 20:12 Re: Steam Forum Downtime Follow-up; Steam Also Breached shihonage
  56. Nov 10, 21:53 Re: Steam Forum Downtime Follow-up; Steam Also Breached Tanto Edge
  63. Nov 11, 01:08 Re: Steam Forum Downtime Follow-up; Steam Also Breached KilrathiAce
  69. Nov 11, 08:12 Re: Steam Forum Downtime Follow-up; Steam Also Breached Omni
  70. Nov 11, 12:29  Re: Steam Forum Downtime Follow-up; Steam Also Breached elefunk
  71. Nov 11, 16:22 Re: Steam Forum Downtime Follow-up; Steam Also Breached saluk
  73. Nov 12, 15:27  Re: Steam Forum Downtime Follow-up; Steam Also Breached Spaced
  74. Nov 12, 16:40   Re: Steam Forum Downtime Follow-up; Steam Also Breached nin
  75. Nov 12, 20:18    Re: Steam Forum Downtime Follow-up; Steam Also Breached Spaced
  76. Nov 12, 20:24     Re: Steam Forum Downtime Follow-up; Steam Also Breached nin
  72. Nov 12, 14:52 Re: Steam Forum Downtime Follow-up; Steam Also Breached ^Drag0n^


footer

.. .. ..

Blue's News logo