Last year’s Steam hack caused concern for users, and Valve hasn’t stopped investigating the breach
Gabe Newell, head honcho over at Valve, informed users last November of a security breach relating to Steam. In the initial notification, Valve didn't have any real concrete evidence that personal data had been stolen by hackers.
Well, it seems that now it has a little but more to go on, and it appears that the hackers may have obtained a copy of a backup file that contained some old account information, which also some encrypted credit card details.
This is the Valve post, which appeared on the Steam forums.
Dear Steam Users and Steam Forum Users
We continue our investigation of last year's intrusion with the help of outside security experts. In my last note about this, I described how intruders had accessed our Steam database but we found no evidence that the intruders took information from that database. That is still the case.
Recently we learned that it is probable that the intruders obtained a copy of a backup file with information about Steam transactions between 2004 and 2008. This backup file contained user names, email addresses, encrypted billing addresses and encrypted credit card information. It did not include Steam passwords.
We do not have any evidence that the encrypted credit card numbers or billing addresses have been compromised. However as I said in November it's a good idea to watch your credit card activity and statements. And of course keeping Steam Guard on is a good idea as well.
We are still investigating and working with law enforcement authorities. Some state laws require a more formal notice of this incident so some of you will get that notice, but we wanted to update everyone with this new information now.
Gabe
It's fortunate that the data is at least three years old, and so most of it may be out of date, but it's still a concern, meaning Steam users should remain vigilant.
Follow Den Of Geek on Twitter right here. And be our Facebook chum here.