Hard Light Productions Forums
Off-Topic Discussion => Gaming Discussion => Topic started by: QuantumDelta on November 10, 2011, 07:55:13 pm
-
I'm surprised it's not been posted already; but I figured I should probably post it here before I went to bed.
http://www.pcgamer.com/2011/11/10/steam-database-hacked-encrypted-credit-card-information-and-passwords-compromised/
Change dem passwerds peeps
-
Password changed.
-
It was bound to happen eventually, I suppose... :/
Keep an eye on dem credit and debit cards, too. No telling how long that encryption will hold out.
-
Changed my password. Good thing I am not using a credit card for my steam purchases, but still....
Oh, for the lulz: read this slashdot comment (http://games.slashdot.org/comments.pl?sid=2519618&cid=38019052)
-
Steam is currently unable to process my change password request.
Crap.
-
So, they write something about an issue last sunday ? It's friday now, and I cannot change my passwort either. They better ****ing make a complete reset of all registered passwords, before someone makes **** with my account :hopping:
-
I changed mine ok :confused:
-
So, they write something about an issue last sunday ? It's friday now, and I cannot change my passwort either. They better ****ing make a complete reset of all registered passwords, before someone makes **** with my account :hopping:
1. That's actually quite a fast response.
2. A complete reset of all passwords is only warranted if all passwords had been stolen; apparently that is not the case.
3. If you have Steam Guard active (and why wouldn't you?), your account is pretty much safe from external intrusions, given that you'd get an email if somebody tried to use it on a PC you haven't authorized for use with your account yet.
4. I do not know why Steam is giving you guys trouble regarding password changes, I changed mine without issue. Maybe, instead of complaining here, you should ask Steam Support what's up with that?
-
Hm, I cannot connect to steam...is that good...or bad?
-
Probably bad.
Changed it now.
-
Well, my steam guard is active, and I still can connect. However, I'm not able to change my PW atm, it says "steam cannot process that at the moment". I keep trying
-
Logged in successfully, received the following:
November 10th, 2011
Dear Steam Users and Steam Forum Users:
Our Steam forums were defaced on the evening of Sunday, November 6. We began investigating and found that the intrusion goes beyond the Steam forums.
We learned that intruders obtained access to a Steam database in addition to the forums. This database contained information including user names, hashed and salted passwords, game purchases, email addresses, billing addresses and encrypted credit card information. We do not have evidence that encrypted credit card numbers or personally identifying information were taken by the intruders, or that the protection on credit card numbers or passwords was cracked. We are still investigating.
We don’t have evidence of credit card misuse at this time. Nonetheless you should watch your credit card activity and statements closely.
While we only know of a few forum accounts that have been compromised, all forum users will be required to change their passwords the next time they login. If you have used your Steam forum password on other accounts you should change those passwords as well.
We do not know of any compromised Steam accounts, so we are not planning to force a change of Steam account passwords (which are separate from forum passwords). However, it wouldn’t be a bad idea to change that as well, especially if it is the same as your Steam forum account password.
We will reopen the forums as soon as we can.
I am truly sorry this happened, and I apologize for the inconvenience.
Gabe.
However, I was not required to change my password. :wtf: Wondering if I really have to at this point.
-
November 10th, 2011
While we only know of a few forum accounts that have been compromised, all forum users will be required to change their passwords the next time they login. If you have used your Steam forum password on other accounts you should change those passwords as well.
is is only forum users thar are being asked to change their passwords
-
Ah, and if you use the same p/w for the forum and your Stiiiim login, then you should also change that. I've never logged into the forums. :lol: Liiiiiight-buuulb! /Gru
-
Well, my steam guard is active, and I still can connect. However, I'm not able to change my PW atm, it says "steam cannot process that at the moment". I keep trying
It's probably getting flooded with every active player on the service trying to get theirs changed. I was able to do it last night, so just keep trying.
-
Guess I shouldn't have displayed quite so much Schadenfreude over Sony... Steam owtch, that hurts, close to home.
-
Finally I got through, changed my steam and forum password
-
Hm...I'm not active on the steam forum...so I can lean back I guess?
-
If you read the stuff posted, you will see that they got access to the steam database, meaning everything, not just the forum. They don't have any evidence (yet) that they took passwords/cc details etc, but TO BE ON THE SAFE SIDE, you should consider changing things :P
-
This is why I never save my credit card info in any of my online accounts, even things like paypal. I only ever order something online like once or twice a month, and while it certainly does take a bit longer to pay when you have to manually enter the credit card info every time, the added security is worth it. Even if someone hacks my account, with no credit card info associated with it they can't do anything financially damaging with it, really. So, anyone who does keep their credit card info saved in their Steam account, ask yourself this: how often do you actually buy games over Steam, and is the added inconvenience of a 2 minutes longer ordering process every time worth the risks?
Also, changed my steam password without any issues.
-
Nope, I don't keep my information saved. That is a really good habit to get into.
-
Nope, I don't keep my information saved. That is a really good habit to get into.
... until you catch a keylogger ;)
-
I have so little money in my checking account most of the time that someone stealing my info couldn't get very far anyway. :p
-
I don't use credit cards. Yeah ING and the iDeal program you invented! Internet banking! Innovation! Woo.
-
I sincerely hope that this triggers Steam/Valve to start selling Steam Gift Cards.
-
You could buy something like a Visa gift card that would essentially work the same way.
-
I have so little money in my checking account most of the time that someone stealing my info couldn't get very far anyway. :p
Oh yeah, that too for me. :P
-
My password changed fine a few days ago. While I don't allow Steam to save my credit card info, it really isn't the end of the world to have a card compromised - virtually all of them have fraud protection, and so long as you keep an eye on your statements (DUH) there's no real risk other than the nuisance of having to reset any authorized scheduled transactions.
-
I had the strip on my debit card stolen once, over a holiday. I couldn't use my card and called in to ask why. Found out it was compromised, answered a couple questions, and by the time my branch got around to calling me to let me know something was wrong the money was back in my account and I had made an appointment to get a new card.
Short version. My bank is awesome, and modern fraud protection and detection mechanisms seem to work quite well.
-
Which one is it? I rarely hear stories of banks reacting so swiftly.
-
TD Canada Trust. Damn they've been wonderful to me. And they have something like 2-3 branches to every other bank's 1. There's always one nearby. And their hours are great.
-
I've actually had a credit-monitoring service call me a couple of times when I've used my Visa debit card to purchase things like Minecraft or games from GOG.com, since they're international purchases. Kind of nice that someone's keeping an eye on that stuff.
-
Yea seriously, in the age of internet banking and stuff, why wouldn't you have an account in reserve only accessible by other accounts on your express authorisation? it's not like it'd take a trip to the bank any more to transfer money and that way you can never be the victim of cc fraud.
-
I had the strip on my debit card stolen once, over a holiday. I couldn't use my card and called in to ask why. Found out it was compromised, answered a couple questions, and by the time my branch got around to calling me to let me know something was wrong the money was back in my account and I had made an appointment to get a new card.
Short version. My bank is awesome, and modern fraud protection and detection mechanisms seem to work quite well.
That is awesome... most CC companies do fraud protection, but from what I've heard, most debit cards (even if they have the CC logo) don't... you can report it, but the banks are slow to give you your money back. If you are in overdraft when you discover the theft, the time until you have a useable amount of cash in your account could be weeks. :ick: ex-TD Bank customer here.
-
I had the strip on my debit card stolen once, over a holiday. I couldn't use my card and called in to ask why. Found out it was compromised, answered a couple questions, and by the time my branch got around to calling me to let me know something was wrong the money was back in my account and I had made an appointment to get a new card.
Short version. My bank is awesome, and modern fraud protection and detection mechanisms seem to work quite well.
That is awesome... most CC companies do fraud protection, but from what I've heard, most debit cards (even if they have the CC logo) don't... you can report it, but the banks are slow to give you your money back. If you are in overdraft when you discover the theft, the time until you have a useable amount of cash in your account could be weeks. :ick: ex-TD Bank customer here.
Well the thing with the Credit Card is its the Company's money, so they are proactive in getting it back, with a Debit Card its your money...
-
It did help that I had things limited to just 100 dollars from a bank machine per day, and they took it from a Royal Bank machine in Montreal when I live in Southern Ontario, and have never in my life used my debit card in Quebec XD. They only got 100 dollars anyways.
Also, not sure off the top of my head if TD Bank (USA) and TD Canada Trust are going to behave exactly the same.
EDIT: And I didn't actually even report it. The theft protection department had locked down my account before I even noticed I was missing money.
-
I've actually had a credit-monitoring service call me a couple of times when I've used my Visa debit card to purchase things like Minecraft or games from GOG.com, since they're international purchases. Kind of nice that someone's keeping an eye on that stuff.
And now that you've told them a few times, they know to let all those wierd international transactions on your card through ?;) (doh? hehe)
-
I actually work for the people who issued my card (though not the people with the card company logo), so I have no problems. Ever.