Valve Confirms: No Steam User Data Breach

Valve has firmly rejected recent reports suggesting that its Steam platform experienced a "major" data hack, emphasizing that there was "NOT a breach" of Steam's systems. Despite concerns raised by some users about the potential compromise of over 89 million user records, Steam's thorough investigation revealed that the incident involved only a leak of "older text messages." These messages contained one-time code SMSs, but crucially, no personal data was included.

In an official statement released on Steam, Valve clarified the nature of the leak after analyzing the sample data. They stated, "The leak consisted of older text messages that included one-time codes that were only valid for 15-minute time frames and the phone numbers they were sent to. The leaked data did not associate the phone numbers with a Steam account, password information, payment information, or other personal data."

Valve further reassured users that "old text messages cannot be used to breach the security of your Steam account." They highlighted that any use of a code to change a Steam email or password via SMS triggers a confirmation sent through email and/or Steam secure messages, adding an extra layer of security.

The fear of data breaches is understandable, especially given the large number of Steam users and the history of significant hacks in the gaming industry. The most notorious incident occurred in 2011 when the PlayStation 3 and PlayStation Portable networks were compromised, leading to a nearly month-long outage and affecting 77 million accounts.

Moreover, the threat extends beyond customer data. In October of the previous year, Pokémon developer Game Freak was hit by a significant hack, resulting in the leak of data about its staff and development projects. Similarly, in 2023, Sony disclosed that nearly 7,000 of its current and former employees' data had been compromised in two separate breaches. Later that year, in December 2023, hackers accessed confidential data at Marvel's Spider-Man developer, Insomniac, highlighting the ongoing risks faced by the gaming industry.