Looks like Steam had a major data breach.

In a post on X, user MellowOnline1 drew attention to another post on LinkedIn from Underdark AI. In it, Underdark AI claims they found a post from someone called Machine1337 on a reputable black market forum, offering to sell 89 million Steam account details for $5,000
Look, I know a guy, who knows a guy, who said he's selling these deets, okay? They're all super reputable.
a69dd304d7d8495ba41a2e70c2cbcaf530a79c263ee4f3e558964c014087c7a9.gif
This guy is full of shit and keeps revising his "story". Steam doesn't even use Twilio. Nothing happened, but journo scum are now picking it up for a quick outrage. But it doesn't hurt to change your passwords, I guess.

EDIT: The supposed source, "Underdark" also looks like a slop farm. According to services page:
underdark.gif
At best, they're corporate grifters. At worst, this is all AI slop hallucinations. And, of course, multiple gaming-related journoid outlets have already picked it up and are running with it at full steam because alarmism is free engagement and SEO.

Oh, and here is the referenced archived Steam leak disclosure post on LinkedIn.
Quoted here:
This private information is unavailable to guests due to policies enforced by third-parties.


The supposed leaker does at least check out, with a possible SMS spoofing python script, so the provenance is there, but at best this "leak" only affects 2FA authentication, maybe, if Steam ever used Twilio, which I'm unable to confirm, meaning only historic 2FA messages are affected, with associated phone numbers. It's also 2 day old news.

Total Journo Death.
 
Last edited:
From the comments on the article:

3 hours before this was published the twitter account (which is the only cited source) admitted that the supposed "hack" is literally impossible: Valve has never used Twilio.



This is journalistic malpractice. You don't publish a claim that hundreds of millions of dollars in digital assets are about to be stolen because of a 5-day-old tweet from some guy on twitter who heard it from some guy on linkedin who heard it from some guy on the dark net who is offering those hundreds of millions of dollars in assets for a mere $5k.



ANY amount of critical thinking should have halted this publication, frankly it reflects poorly on XDA. Do better.
I'm taking this with a grain of salt. This is a good reminder to enable 2FA if you haven't already, though.
 
From the comments on the article:


I'm taking this with a grain of salt. This is a good reminder to enable 2FA if you haven't already, though.
The comments section is gold. Nothing but journoscum struggling to damage control an article they didn't actually research. The journoscum were so lazy they didn't even include a Steam Deck in the article header, it's an Asus Rog.
 
A reminder that all low-IQ gorilla niggers should be changing their passwords on a fairly regular basis.
 
The comments section is gold. Nothing but journoscum struggling to damage control an article they didn't actually research. The journoscum were so lazy they didn't even include a Steam Deck in the article header, it's an Asus Rog.

They're so quick to post "breaking news" that they don't even care if it's legit. It's just a rush to be first and get all the asspats. Fuck journos.
 
Back