Valve Confirms: No Steam User Data Breach

Valve has firmly refuted recent reports suggesting its Steam platform experienced a "major" data hack, asserting there was "NOT a breach" of Steam systems.

Despite concerns raised by some users over reports that over 89 million user records were compromised, Steam's thorough investigation revealed that the leak involved only "older text messages." These messages contained one-time code SMSs but crucially, did not include any personal data.

In a statement published on Steam, Valve clarified that after reviewing the leak sample, it concluded that customer data remained secure. They explained, "The leak consisted of older text messages that included one-time codes that were only valid for 15-minute time frames and the phone numbers they were sent to. The leaked data did not associate the phone numbers with a Steam account, password information, payment information, or other personal data."

Valve further reassured users, stating, "Old text messages cannot be used to breach the security of your Steam account, and whenever a code is used to change your Steam email or password using SMS, you will receive a confirmation via email and/or Steam secure messages."

Given the increasing frequency of data breaches and the fact that over 89 million individuals have Steam accounts, users were understandably anxious about potential security threats. A notable example of a video game-related data breach occurred in 2011 when the networks for PlayStation 3 and PlayStation Portable were severely compromised, resulting in a nearly month-long outage and the exposure of 77 million accounts.

Moreover, it's not only customer data at risk. Just last October, Pokémon developer Game Freak suffered a significant hack, leading to leaks of data about its former and current staff, as well as its development pipeline. In 2023, Sony confirmed that data of nearly 7,000 of its current and former employees was compromised in two separate breaches that year. Additionally, in December 2023, hackers breached confidential data at Marvel's Spider-Man developer, Insomniac, underscoring the ongoing vulnerability of the gaming industry to cyber attacks.