89 Million Steam User Details Allegedly Hacked and Sold Online

San Francisco, CA – A serious breach has reportedly exposed the account details of 89 million Steam users. The cybersecurity crisis was highlighted by a post from the cybersecurity firm Underdark, which claimed that a hacker known as Machine1337 offered the breached data for sale on a dark web forum for about $5,000.

The incident was first reported on LinkedIn and later disseminated by the gaming community via Mellow_Online1. According to the post by Underdark, the dataset includes numerous user records, leading to concerns about security for a significant portion of Steam’s active user base.

The report indicates that the breach did not directly target Steam, but rather stemmed from a third-party vendor. Initially, there were speculations regarding a vendor named Trillio, but Valve, Steam’s parent company, clarified that they have no association with that firm.

Machine1337’s post provided alarming details, including a Telegram contact for interested buyers and claims of possessing internal vendor data, suggesting deeper access to user information. Security experts warn that this breach could result in phishing threats and session hijacking attempts using two-factor authentication codes that may also have been compromised.

In light of these developments, Steam users are urged to promptly change their passwords and activate two-factor authentication (2FA) if they have not done so already. Additionally, personal vigilance is encouraged for spotting suspicious emails or messages that could be part of phishing scams.

User responses to this situation highlight the widespread concern over digital security among gamers. With the breach affecting approximately 70% of Steam’s user base, the appeal for swift action to secure personal accounts is intensifying.

They have yet to respond officially regarding the breach; however, Valve is expected to release more details soon. Until then, it is vital for users to take necessary precautions to safeguard their accounts.