• Hey, guest user. Hope you're enjoying NeoGAF! Have you considered registering for an account? Come join us and add your take to the daily discourse.

Steam security issue revealed personal info to other users on XMas Day (fixed)

Rhaknar

The Steam equivalent of the drunk friend who keeps offering to pay your tab all night.
Anyone with credit information stored on Steam should consider notifing their credit company ASAP to refuse all transactions until further notice.

on decemebr 25th at night (in europe)? probably no banks working >_>
 
People are only noticing this now? It's been happening for a week now, with the "Credentials Expired" message popping up if you get hit with it. It's been since Pratt week that hitting my personal Steam Community tab takes me to someone else's page.

Though I guess the issue has migrated to the Account Details page now, so that's new.
 

CoG

Member
Getting someone else's account info here with funds in their wallet. As someone in the "12 year club" I've really, really had it with Valve lately. I better not get charged for anything this weekend.
 

dex3108

Member
I disabled pre-approved payment on PayPal for Steam so payment info should be fine. But other info is still potentially compromised.

I just wonder how will Valve make up for this mess, especially to those few accounts that most people can see.
 
Someone definitely just got into my account, because I got a Steam Guard code email. They can't do anything without it so I think I'm fine.

This is totally fucked, though.
 

malfcn

Member
comical-ali.jpg

Some account details were compromised, but nothing to fear.
 

jesu

Member
I can't seem to log in on steampowered.com or the Steam client.
Little circle spinning on steampowered.com 'Could Not Connect to the Steam Network' on the client.

I take it they're on to it?
 

vypek

Member
I was in the steam forums and now it is closed off. Can't do anything via browser. Already logged off the client
 

Kezen

Banned
Digital is the future but it can be scary sometimes.
The inability to login to the store is likely Valve's doing. You can't spend any money on any account for the time being.
 
Ugh, this is really freaky. I only use PayPal and my wallet has a whopping $0.08 in it, so hopefully my stuff doesn't end up with some asshole who wants to hijack my lame account anyway.
 

ZanDatsu

Member
I'm sure it's not a big deal, will be over soon and only a very small number of accounts are visible. They'll be compensated for any damages, not to worry.
 

Manatox

Member
Damn this is worriying >.< I'ts litterally possible to switch from one user to another with one click. And each time it was some other guy >.<

Should have removed my CC info from steam..
 
team #oren**** here

Can everyone please check if your account has Steam Guard enabled? Mine doesn't (the acc I was directed to I mean)
 

ss_lemonade

Member
All the pages seem to lead to random accounts. The profile page, purchase history etc. Shit, I don't even remember if I have my card on there
 

Grief.exe

Member
Don't be ridiculous. A Steam username without any other context isn't a security compromise. It's just a username like a GAF name. Edit: Plus it's interesting to see that different people here see the same names, like it's really a handful of compromised accounts somehow...

Posting the screenshots with transaction history is shitty, however.
That is unequivocally false.

A GAF user name is publicly available, while a Steam user name is completely private for security reasons. Beyond that, no payment or personal information is tied to a GAF account unless a user chooses to do so.
Sure, but you'd give your Steam name for, say, a gaffer to add you on their friendlist right?


So when you give your Steam name to someone to add you, you're compromising your account security? Come on. Besides, people are probably saying "hey I got joedude123 too" repeatedly all over the Internet, damage's done really.

Again, unequivocally false.

You don't give away your account name over Steam in order for someone else to add you. Users send their publicly available profile name, and they add you through there. Your account name is never exchanged for adding to your friends list or playing with other people.
 
I just got an email from valve regarding purchase info on my account.

edit: someones keep buying random games and stuff under my account.
 
Top Bottom