A staggering report reveals that the account information of 89 million Steam users has potentially been compromised.
While the precise method of the breach remains ambiguous, this serves as a crucial reminder to update your passwords and activate two-factor authentication. Last Sunday, the cybersecurity firm, Underdark, announced a data breach via LinkedIn. This post caught the attention of a gaming-focused X user, Mellow_Online1, as covered by tech news outlet XDA. According to Underdark’s LinkedIn post, a threat actor named Machine1337 surfaced on a notorious dark web forum, claiming to have infiltrated Steam and was offering a dataset of more than 89 million user records for the price of $5,000.
Machine1337’s claim allegedly included a Telegram contact, links to sample data, and internal vendor information that suggested deeper system access.
The origin of the breach is suspected to come from a third-party service rather than a direct attack on Steam itself. Initially, Mellow_Online1 speculated involvement from a vendor named Trillio, but Valve, Steam’s parent company, confirmed to Mellow_Online1 that they do not collaborate with Trillio.
As the situation remains unclear, Mashable has reached out to Valve seeking confirmation and detailed information about how the breach happened, promising updates as more information becomes available. Meanwhile, it’s advised that Steam users update their passwords, enable two-factor authentication, remain vigilant for any suspicious emails, and be cautious of phishing attempts masquerading as official Steam communications.