[QuantumDelta]

I'm surprised it's not been posted already; but I figured I should probably post it here before I went to bed.

http://www.pcgamer.com/2011/11/10/steam-database-hacked-encrypted-credit-card-information-and-passwords-compromised/

Change dem passwerds peeps

[Liberator]

Password changed.

[G0atmaster]

It was bound to happen eventually, I suppose... :/

Keep an eye on dem credit and debit cards, too. No telling how long that encryption will hold out.

[The E]

Changed my password. Good thing I am not using a credit card for my steam purchases, but still....

Oh, for the lulz: read this slashdot comment

[NGTM-1R]

Steam is currently unable to process my change password request.

Crap.

[Starman01]

So, they write something about an issue last sunday ? It's friday now, and I cannot change my passwort either. They better ****ing make a complete reset of all registered passwords, before someone makes **** with my account

[headdie]

I changed mine ok

[The E]

So, they write something about an issue last sunday ? It's friday now, and I cannot change my passwort either. They better ****ing make a complete reset of all registered passwords, before someone makes **** with my account

1. That's actually quite a fast response.
2. A complete reset of all passwords is only warranted if all passwords had been stolen; apparently that is not the case.
3. If you have Steam Guard active (and why wouldn't you?), your account is pretty much safe from external intrusions, given that you'd get an email if somebody tried to use it on a PC you haven't authorized for use with your account yet.
4. I do not know why Steam is giving you guys trouble regarding password changes, I changed mine without issue. Maybe, instead of complaining here, you should ask Steam Support what's up with that?

[crizza]

Hm, I cannot connect to steam...is that good...or bad?

[NGTM-1R]

Probably bad.

Changed it now.

[Starman01]

Well, my steam guard is active, and I still can connect. However, I'm not able to change my PW atm, it says "steam cannot process that at the moment".  I keep trying

[jr2]

Logged in successfully, received the following:

November 10th, 2011
Dear Steam Users and Steam Forum Users:

Our Steam forums were defaced on the evening of Sunday, November 6. We began investigating and found that the intrusion goes beyond the Steam forums.

We learned that intruders obtained access to a Steam database in addition to the forums. This database contained information including user names, hashed and salted passwords, game purchases, email addresses, billing addresses and encrypted credit card information. We do not have evidence that encrypted credit card numbers or personally identifying information were taken by the intruders, or that the protection on credit card numbers or passwords was cracked. We are still investigating.

We don’t have evidence of credit card misuse at this time. Nonetheless you should watch your credit card activity and statements closely.

While we only know of a few forum accounts that have been compromised, all forum users will be required to change their passwords the next time they login. If you have used your Steam forum password on other accounts you should change those passwords as well.

We do not know of any compromised Steam accounts, so we are not planning to force a change of Steam account passwords (which are separate from forum passwords). However, it wouldn’t be a bad idea to change that as well, especially if it is the same as your Steam forum account password.

We will reopen the forums as soon as we can.

I am truly sorry this happened, and I apologize for the inconvenience.

Gabe.

However, I was not required to change my password.    Wondering if I really have to at this point.

[headdie]

November 10th, 2011

While we only know of a few forum accounts that have been compromised, all forum users will be required to change their passwords the next time they login. If you have used your Steam forum password on other accounts you should change those passwords as well.

is is only forum users thar are being asked to change their passwords

[jr2]

Ah, and if you use the same p/w for the forum and your Stiiiim login, then you should also change that.  I've never logged into the forums.    Liiiiiight-buuulb!  /Gru

[Mongoose]

Well, my steam guard is active, and I still can connect. However, I'm not able to change my PW atm, it says "steam cannot process that at the moment".  I keep trying

It's probably getting flooded with every active player on the service trying to get theirs changed. I was able to do it last night, so just keep trying.

[Mikes]

Guess I shouldn't have displayed quite so much Schadenfreude over Sony... Steam owtch, that hurts, close to home.

[Starman01]

Finally I got through, changed my steam and forum password

[crizza]

Hm...I'm not active on the steam forum...so I can lean back I guess?

[QuantumDelta]

If you read the stuff posted, you will see that they got access to the steam database, meaning everything, not just the forum. They don't have any evidence (yet) that they took passwords/cc details etc, but TO BE ON THE SAFE SIDE, you should consider changing things

[newman]

This is why I never save my credit card info in any of my online accounts, even things like paypal. I only ever order something online like once or twice a month, and while it certainly does take a bit longer to pay when you have to manually enter the credit card info every time, the added security is worth it. Even if someone hacks my account, with no credit card info associated with it they can't do anything financially damaging with it, really. So, anyone who does keep their credit card info saved in their Steam account, ask yourself this: how often do you actually buy games over Steam, and is the added inconvenience of a 2 minutes longer ordering process every time worth the risks?
Also, changed my steam password without any issues.