Valve Confirms: No Steam User Data Breach in Hack

Valve has firmly refuted recent reports claiming that its Steam platform experienced a "major" data hack, emphasizing that there was "NOT a breach" of Steam systems. While some users expressed concerns over reports suggesting that over 89 million user records were compromised, Steam's thorough investigation concluded that the incident involved only a leak of "older text messages." Importantly, these messages contained one-time code SMSs that did not include any personal data.

In a statement released on Steam, Valve detailed its findings after examining the leaked data. The company stated, "The leak consisted of older text messages that included one-time codes that were only valid for 15-minute time frames and the phone numbers they were sent to. The leaked data did not associate the phone numbers with a Steam account, password information, payment information, or other personal data."

Valve reassured users that "old text messages cannot be used to breach the security of your Steam account." They further explained that whenever a code is used to change a Steam email or password via SMS, users receive a confirmation through email and/or secure Steam messages, adding an additional layer of security.

Taking this opportunity, Valve encouraged players to enhance their account security by setting up the Steam Mobile Authenticator. This tool provides 2-factor authentication, which Valve described as "the best way to send secure messages about your account and your account's safety."

The rise in data breaches has heightened user concerns, especially given that over 89 million individuals have Steam accounts. The potential for a security compromise is a valid worry, particularly when considering past incidents like the infamous 2011 data breach that affected PlayStation 3 and PlayStation Portable networks, leading to a nearly month-long outage and compromising 77 million accounts.

Moreover, it's not only customer data at risk. Recent breaches have targeted other entities within the gaming industry. In October of the previous year, Pokémon developer Game Freak suffered a significant hack, resulting in the leak of data about its former and current staff, as well as details about its development pipeline. In 2023, Sony confirmed that data of nearly 7,000 of its current and former employees was compromised in two separate breaches. Additionally, in December 2023, hackers breached confidential data at Marvel's Spider-Man developer, Insomniac, highlighting the ongoing threat to the gaming industry's security.