Guys! If you can, move all your money from the account tied to your Credit Card to another account not tied to anything. That's what I did, at least people cannot buy anymore games using my account.
On the website I got account_name account, but I wasn't connected and too scared to even try. On the client it's was my account anyway.
While it is Christmas, not being able to use the store, and potentially losing money seems like it should be the priority.
And does it matter today's Christmas? NOBODY can purchase anything to their own accounts. It won't affect valve more than it's already.
Checked my paypal account and nothing has been purchased on it (last time I was in steam, paypal wasnt asking for a password as it was setup as 'my paypal account')
Have no funds in steam wallet and no cc linked. Steamguard always been enabled....hopefully this shit gets sorted. Cannot login to steam at the moment