Steam. This is getting beyond a joke.

[Zak33]

10 February 2012
Dear Steam Users and Steam Forum Users:

We continue our investigation of last year’s intrusion with the help of outside security experts. In my last note about this, I described how intruders had accessed our Steam database but we found no evidence that the intruders took information from that database. That is still the case.

Recently we learned that it is probable that the intruders obtained a copy of a backup file with information about Steam transactions between 2004 and 2008. This backup file contained user names, email addresses, encrypted billing addresses and encrypted credit card information. It did not include Steam passwords.

We do not have any evidence that the encrypted credit card numbers or billing addresses have been compromised. However as I said in November it’s a good idea to watch your credit card activity and statements. And of course keeping Steam Guard on is a good idea as well.

We are still investigating and working with law enforcement authorities. Some state laws require a more formal notice of this incident so some of you will get that notice, but we wanted to update everyone with this new information now.

Gabe

Credit cards from 2004 to 2008 will, very likely, all have expired by now. Passwords were not included in the back up either.

I can't stand having to use Steam, but life, as they say, is life. We are where we are.

[Hicks12]

better cancel my debit card then... i only removed my card from the system at christmas and since they stole an old backup that means my cards 99% on it >.<. Must wait for mass effect 3 to be paid for and despatched first... cant change card details at bee without cancelling order (or so people tell me...)

[sam3]

better cancel my debit card then... i only removed my card from the system at christmas and since they stole an old backup that means my cards 99% on it >.<. Must wait for mass effect 3 to be paid for and despatched first... cant change card details at bee without cancelling order (or so people tell me...)

The card information was encrypted too, and there's no evidence this encryption has been broken (or will be broken in a reasonable amount of time) - so don't worry too much about cancelling your card