Valve reassures: no need to change Steam password urgently despite reports of data breach
Recent reports about a large-scale Steam data breach that allegedly affected 89 million accounts caused a wave of panic among users. However, Valve has officially stated that there was no serious breach of the system's security, and there is no need to change passwords or phone numbers at this time.
Here's What We Know
Initially, there was information that the data of about 89 million Steam users were on the black market. According to the cybersecurity company Underdark, an attacker with the pseudonym Machine1337 offered a database with these accounts for $5,000. It allegedly contained usernames, email addresses, Steam IDs, and other information.
However, Valve quickly responded to these statements, explaining that the leak only concerns old SMS messages with one-time confirmation codes that are automatically cancelled after 15 minutes. It is important to note that these messages do not contain passwords, payment details, or other personal information related to Steam accounts.
The company also added that any attempts to change the password or email via SMS will be confirmed by additional messages, so users will be informed about this.
Source: Valve