Steam account hacked and stolen last night.

mikeysthoughts

Active Member
To round off a spectacular week (car bumped into last weekend by a driver not looking where he's going), I received an SMS text to my personal phone last night stating they had processed my request to change the telephone number on my account.

I powered up the laptop and tried to log in, but the email address and password have been changed. I use two-factor authentication on all of my email addresses and I can't see any evidence these have been logged into without my permission.

Given I've had this account for over 10 years without changing any personal info, I'm confident Valve/Steam will recover my account to me. Still, it's a worry as it's my main games vault with a library easily worth over a grand.

Constant vigilance, people.
 

enigma1701

Well-known Member
To round off a spectacular week (car bumped into last weekend by a driver not looking where he's going), I received an SMS text to my personal phone last night stating they had processed my request to change the telephone number on my account.

I powered up the laptop and tried to log in, but the email address and password have been changed. I use two-factor authentication on all of my email addresses and I can't see any evidence these have been logged into without my permission.

Given I've had this account for over 10 years without changing any personal info, I'm confident Valve/Steam will recover my account to me. Still, it's a worry as it's my main games vault with a library easily worth over a grand.

Constant vigilance, people.
Did you have any luck getting it sorted?
 

mikeysthoughts

Active Member
Did you have any luck getting it sorted?
Not yet. They've asked for proof of certain things (PayPal account, certain keys) which have been provided.
 

enigma1701

Well-known Member
Not yet. They've asked for proof of certain things (PayPal account, certain keys) which have been provided.
Cool, I'd like to think they can verify stuff to sort it out. But if it's two factor authentication, how does that get hacked?
 

mikeysthoughts

Active Member
Cool, I'd like to think they can verify stuff to sort it out. But if it's two factor authentication, how does that get hacked?
Good news, it was returned to me this morning. Steam were pretty good :clap:

I don't know how it was done, but I think my old, old hotmail account was compromised, allowing someone to verify their attempts to enter via my Yahoo email account. Dunno. Anyway, all passwords updated and redundant accounts now secured.
 

mossym

Distinguished Member
i got an alert last night( think i got one last week and didn't pay too much attention) that someone had logged into my account and triggered the two step authentication, they had my password. changed it first thing this morning.

always found 2 step authentication a pain but then you get reminded why it is useful
 

MarkyPancake

Distinguished Member
Glad you got it sorted.

I moved all my console gaming accounts over to TFA where possible recently and reviewed the email addresses and reduced which ones could log into my Microsoft account.
 

MartinH32

Well-known Member
Someone attempted to get into my Steam account last year. I got an email triggering a code to enter. Thankfully I've two step set up, but still don't know where or how they god my password
 

mikeysthoughts

Active Member
Someone attempted to get into my Steam account last year. I got an email triggering a code to enter. Thankfully I've two step set up, but still don't know where or how they god my password
I use Lastpass password vault and it generates sillystrength passwords, but even so without two factor authentication I now feel insecure.

I did a security test through lastpass after this breach and there were a number of known security breaches it flagged up across a fair few websites. I was surprised at how many big names had been compromised in recent years.

It is possible that the cleverest of hackers would be able to piece together information gathered across multiple breaches to target certain high value accounts.
 

MartinH32

Well-known Member
I use Lastpass password vault and it generates sillystrength passwords, but even so without two factor authentication I now feel insecure.

I did a security test through lastpass after this breach and there were a number of known security breaches it flagged up across a fair few websites. I was surprised at how many big names had been compromised in recent years.

It is possible that the cleverest of hackers would be able to piece together information gathered across multiple breaches to target certain high value accounts.
Yes, I'm a pro photographer by trade and use Adobe. They got hacked a few years back and my password was stolen! Sadly it happens all too often
 

Similar threads

Top Bottom