• Hey, guest user. Hope you're enjoying NeoGAF! Have you considered registering for an account? Come join us and add your take to the daily discourse.

Steam security issue revealed personal info to other users on XMas Day (fixed)

Head.spawn

Junior Member
I see some Brazilian guys account in mine.

Holy shit Gaben. wtf did you do? Now maybe it's time to overhaul this Frankenstein piece of shit?

He even has Steam Guard.

edit: oh shit, so it's cycling through accounts now.
 

XiaNaphryz

LATIN, MATRIPEDICABUS, DO YOU SPEAK IT
My account details are back to normal. Same happened for anyone else?

I was never even able to log into account details until just now. Never saw any weirdness other than that thankfully. Email looks right so noone messed with changing anything, and purchase history looks fine.
 

Brashnir

Member
Now I'm getting error code -310 on everything. Maybe they finally shut it down?

edit - nevermind, it's back and still fucked.
 

iNvid02

Member
its a new person's details every time you click the account info tab, doesn't help that there is some visible info which could help an attacker get into the account. fuck me

shut it down gaben
 

Pancakes

hot, steaming, as melted butter slips into the cracks, drizzled with sticky sweet syrup OH GOD
I had my profile for a few seconds and deleted my card info, wtf is going on?
 

DarKshodaN

Member
wow first i was in a russian account now in a german account, i maked screenshots from it if anyone don't believe me, this is fucked up.
 

Reebot

Member
What an unbelievable fuck up.

I was finally able to go in and confirm I have no saved payment info, but this is beyond unacceptable.
 
Pretty glad I only ever used paypal

Yeah this is why I only use PayPal for online purchases. I'm not a fan of how PayPal conducts itself in multiple ways, but by default they do provide an extra layer of security. Presumably, even with a PayPal account linked to Steam there's no way to make purchases on the account without being able to log into Paypal as well. In this case, the main threat from this type of attack is general chaos...a certain percentage of maladaptive randoms might screw with accounts...like stealing games that are saved as gifts by "gifting" them, removing games from libraries just to fuck with people, etc....

I'm thinking most gamers aren't thieves or assholes, so most will not harm another's account. But there's always the bad apples who just want to watch the world burn. Which is precisely what the hackers intended with this move if I had to guess.
 

ViciousDS

Banned
Just checked my paypal and valve/steam isn't even an approved payment. You must have that setup only when you save the info. I enter all my info on every purchase.
 

Syf

Banned
Just called my card company and blocked all Steam transactions for now. Incredible fuck up by Valve.
 
Funny, I always use Steam cards to add funds and avoided using my credit card. I was about to use it this sale but thank God I didn't.
 
I'm actually getting a lot of diff accounts now, got 12 diff ones so far. Crazy. I just keep on refreshing it and get a new account each time. At first I was only getting two diff ones constantly, now I am getting new ones.
 

Grief.exe

Member
WHY IS THE STORE AND ACCOUNT PAGES AND EVERYTHING STILL UP

This is 100% the kind of thing you hit the big red "shut it down" button and shut it down. This isn't something like when there is a hack and stuff may have been taken and you email and say "change passwords".

This is (seemingly) random people having direct account access to accounts not belonging to them and being able to still use the store to buy shit or change account information. This is exactly the stuff you nuke the servers for to protect the customer.

But nah, we'll leave the servers up. Lots of people would have gotten steam credit today, gotta let them spend it!

I know it's difficult for people to think big picture on certain things, but can you think what day it is?
 

Rhaknar

The Steam equivalent of the drunk friend who keeps offering to pay your tab all night.
well I just canceled my card just in case
 

jmga

Member
It does not seem anything serious, I'm logged in with another user account name but I can't see his profile and when I try to buy something it successfully retrieves my data(email, paypal account, etc), not the ones from the other account.
 

Iadien

Guarantee I'm going to screw up this post? Yeah.
I was wondering wth was going on, I was browsing and the language was changing from russian to spanish. lol
 

Steel

Banned
My account details are back to normal. Same happened for anyone else?

It's possible that your account was added to the list and other people are viewing it too. Apparently steam is suggesting you log the fuck out.
 
Top Bottom