Steam Forum and Steam Account Database hacked!!!

[Serial Thrilla]

Last sunday the Steam Forum was hacked. It was redirecting to a "Warez Site". Later the Steam Technicians shut it down to check out what was going on. It took the whole week. At the 10th Nov Gabe and his Team found out that the hackers also made it into the Database with all Steam accounts which contains passwords, credit card stuff and a lot of more.

Gabe's message to all Steam users:

Yesterday, on November 10, 2011, the following message was sent to all users via a Steam message.

Dear Steam Users and Steam Forum Users:

Our Steam forums were defaced on the evening of Sunday, November 6. We began investigating and found that the intrusion goes beyond the Steam forums.

We learned that intruders obtained access to a Steam database in addition to the forums. This database contained information including user names, hashed and salted passwords, game purchases, email addresses, billing addresses and encrypted credit card information. We do not have evidence that encrypted credit card numbers or personally identifying information were taken by the intruders, or that the protection on credit card numbers or passwords was cracked. We are still investigating.

We don't have evidence of credit card misuse at this time. Nonetheless you should watch your credit card activity and statements closely.

While we only know of a few forum accounts that have been compromised, all forum users will be required to change their passwords the next time they login. If you have used your Steam forum password on other accounts you should change those passwords as well.

We do not know of any compromised Steam accounts, so we are not planning to force a change of Steam account passwords (which are separate from forum passwords). However, it wouldn't be a bad idea to change that as well, especially if it is the same as your Steam forum account password.

We will reopen the forums as soon as we can.

I am truly sorry this happened, and I apologize for the inconvenience.

Gabe.

Source: http://store.steampowered.com/news/6761/

So please change your password and check your payment stuff if you paid via credit card and so on..

[Zach]

insert generic pc gaming joke here
That really sucks. I hope their passwords were hashed. I wonder who's behind it and how they got in.

[Serial Thrilla]

Well, the database contains passwords with hash+salt.

So when you have a good GPU eg GTX 570 you can crack the password easy with Hashcat.

[pspboy]

PSN all over again...

[HiddenKnowledge]

Well, the database contains passwords with hash+salt.

So when you have a good GPU eg GTX 570 you can crack the password easy with Hashcat.

It depends on which hashing method they used, though.
And whether they know the salt or not.

[Serial Thrilla]

Yes, the salt and hash is inside the database, they have hacked.

[Zach]

Well, let's just hope that they used a decent hashing method. For your sake.
* Zach plays his Xbox without fear of getting hacked

[HiddenKnowledge]

Lol, zack. Xbox is just lucky upto this point.
Anyway, this is just about the forums, not the steam database itself.

[cloudhosting]

Oh my gosh that is really bad! I hope that won't happen anymore!

[Serial Thrilla]

Lol, zack. Xbox is just lucky upto this point.
Anyway, this is just about the forums, not the steam database itself.

It is about the database that contains the Steam account name, password in hash+salt, credit card informations, location, payments and more.

The forum database was hacked and the Steam account database was hacked.