techPowerUp! Forums

Go Back   techPowerUp! Forums > www.techpowerup.com > News

Reply
 
Thread Tools
Old Feb 10, 2012, 07:13 PM   #1
btarunr
Editor & Senior Moderator
 
btarunr's Avatar
 
Join Date: Oct 2007
Location: Hyderabad, India
Posts: 14,982 (7.30/day)
Thanks: 788
Thanked 12,899 Times in 5,650 Posts
Send a message via AIM to btarunr Send a message via MSN to btarunr

System Specs

Valve Asks Users to Keep An Eye On Their Credit Card Usage

In November 2011, Valve admitted that its Steam forums were hacked, and some user data including encrypted credit card information and hashed passwords were stolen, and that pending investigation, it asked users to change their Steam passwords. Valve noted that at that time, it had not seen any evidence of encrypted data being hacked. Today, Valve issued an update to all its Steam members via e-mail, where it notified them that investigation is still in progress, that Valve is taking help of external agencies to investigate, and that it still sees no evidence of encrypted credit card data being tampered with. As a note of caution, though, it asked users to keep an eye on their credit card activity and statements.

The transcript of Valve's email to Steam users follows.

Quote:
Dear Steam Users and Steam Forum Users

We continue our investigation of last year's intrusion with the help of outside security experts. In my last note about this, I described how intruders had accessed our Steam database but we found no evidence that the intruders took information from that database. That is still the case.

Recently we learned that it is probable that the intruders obtained a copy of a backup file with information about Steam transactions between 2004 and 2008. This backup file contained user names, email addresses, encrypted billing addresses and encrypted credit card information. It did not include Steam passwords.

We do not have any evidence that the encrypted credit card numbers or billing addresses have been compromised. However as I said in November it's a good idea to watch your credit card activity and statements. And of course keeping Steam Guard on is a good idea as well.

We are still investigating and working with law enforcement authorities. Some state laws require a more formal notice of this incident so some of you will get that notice, but we wanted to update everyone with this new information now.

Gabe
btarunr is offline  
Reply With Quote
The Following 4 Users Say Thank You to btarunr For This Useful Post:
Old Feb 10, 2012, 07:33 PM   #2
mtosev
1000 Posts
 
mtosev's Avatar
 
Join Date: Mar 2005
Location: Maribor, Slovenia
Posts: 1,145 (0.38/day)
Thanks: 72
Thanked 147 Times in 107 Posts

System Specs

I haven't changed my Steam account password. should I worry? i'm not registered on the steam forum
__________________
My notebook:

Dell Inspiron 1520 (6464) Intel Core 2 Duo (Merom) T7500, 2gb Hyundai 667MHz DDR2 CL5, 8600M GT 256Mb DDR2, 160Gb Seagate NCQ SATA, TSST DVD-RAM/+/-RW, PM/GM965 chipset

[img disabled]http://img167.imageshack.us/img167/534/326cd7.gif[/IMG]

CNN - "The Most Trusted Name in News"
mtosev is offline  
Reply With Quote
Old Feb 10, 2012, 07:35 PM   #3
Crap Daddy
2000 Posts
 
Crap Daddy's Avatar
 
Join Date: Oct 2010
Posts: 2,284 (2.44/day)
Thanks: 943
Thanked 963 Times in 671 Posts

System Specs

Haven't changed my password then and my credit card is in fact a debit card and my bank account is empty most of the time.
Crap Daddy is online now  
Reply With Quote
Old Feb 10, 2012, 07:43 PM   #4
WhiteLotus
3500 Posts
 
WhiteLotus's Avatar
 
Join Date: Jul 2007
Location: Plymouth, UK
Posts: 4,808 (2.27/day)
Thanks: 529
Thanked 856 Times in 682 Posts

System Specs

Quote:
Originally Posted by Crap Daddy View Post
Haven't changed my password then and my credit card is in fact a debit card and my bank account is empty most of the time.
These days the banks will let that money go out, and then charge you a fortunate for allowing your account to get like that. Best to keep an eye out.
__________________
http://tpucdn.com/forums/signaturepics/sigpic41435_1.gif

“Sorry but I cannot respond now, I am running a full virus scan on the internet.” -brandonwh64
WhiteLotus is offline  
Reply With Quote
Old Feb 10, 2012, 07:53 PM   #5
Kantastic
3500 Posts
 
Kantastic's Avatar
 
Join Date: May 2009
Location: The Big Apple
Posts: 4,976 (3.38/day)
Thanks: 1,252
Thanked 930 Times in 739 Posts

System Specs

Quote:
Originally Posted by WhiteLotus View Post
These days the banks will let that money go out, and then charge you a fortunate for allowing your account to get like that. Best to keep an eye out.
I made sure that my card cannot be overdrawn.
__________________
Heatware
Kantastic is offline  
Reply With Quote
Old Feb 10, 2012, 08:02 PM   #6
CJCerny
500 Posts
 
Join Date: Nov 2008
Location: Akron, OH
Posts: 756 (0.46/day)
Thanks: 2
Thanked 213 Times in 178 Posts

That credit card data is encrypted to hell and back--very little chance they will be able to unencrypt it and reassemble it. It is possible but, at best, they'll get just a handle of cards--definitely not all the users.
CJCerny is offline  
Reply With Quote
Old Feb 10, 2012, 08:07 PM   #7
mrw1986
1000 Posts
 
mrw1986's Avatar
 
Join Date: May 2007
Location: Wallingford, CT
Posts: 1,997 (0.90/day)
Thanks: 122
Thanked 338 Times in 260 Posts

System Specs

Quote:
Originally Posted by Kantastic View Post
I made sure that my card cannot be overdrawn.
Here's something most people don't know about that feature...

The only kind of purchase that won't overdraw your account is if it's swiped physically. Making purchases online and EFT's will still overdraw your account. How do I know? I accidentally overdrew my account with an online purchase even though I used my debit card. They refunded me the charge because of a misunderstanding, but the new regulation clearly states it only prevents overdraws from an actual swipe of the card.

Edit: Also, as far as I know this is a standard regulation set down by the government. It's part of the opt-in/opt-out overdraw legislature.
__________________
Visit TechFuzion.net

My Heatware
mrw1986 is offline  
Reply With Quote
The Following User Says Thank You to mrw1986 For This Useful Post:
Old Feb 10, 2012, 08:30 PM   #8
stinger608
Eligible for custom title
 
stinger608's Avatar
 
Join Date: Nov 2008
Location: Wyoming
Posts: 5,476 (3.31/day)
Thanks: 7,844
Thanked 2,526 Times in 1,774 Posts
Send a message via MSN to stinger608

System Specs

And that is why I only use my PayPal account for Steam, Amazon, NewEgg, etc...

PayPal is a PITA and many will flame the hell out someone using their services, however none of your credit card/debit card information is forwarded to online retailers.
__________________
#3 Forever A Fan!
Just Because I Don't Care Doesn't Mean I Don't Understand



Check our team Status on Free-DC
stinger608 is offline  
Crunching for Team TPU
Reply With Quote
Old Feb 10, 2012, 08:37 PM   #9
DRDNA
3500 Posts
 
DRDNA's Avatar
 
Join Date: Feb 2006
Location: New York
Posts: 4,122 (1.56/day)
Thanks: 612
Thanked 494 Times in 424 Posts

System Specs

Hmmm...I wonder why I never received the email warning from steam? I just double triple checked too.
__________________
Asus P6T Deluxe Intel X58/ i7-920CO@4.2GHZ 24/7 <> CORSAIR DOMINATOR 6GB (3 x 2GB) DDR3 1600.<> ThermalTake ToughPower 1200 WATT PSU
2X ATI Radeon HD 4870 X2 2GB DDR5 <> Asetek Liquid CPU Cooling System
320GBx4 Perpendicular RAID-0/BLU-RAY/HD-DVD Reader / DVD±R/±RW Writer
LG 50" 50PK550 1080p 600Hz Plasma/WestingHouse 37 inch @1920X1080/Windows 7 Pro/64
DRDNA is offline  
Reply With Quote
Old Feb 10, 2012, 09:02 PM   #10
nickbaldwin86
75 Posts
 
nickbaldwin86's Avatar
 
Join Date: Oct 2011
Posts: 191 (0.33/day)
Thanks: 5
Thanked 20 Times in 15 Posts

System Specs

reason why I never put a debit/credit card on file at Steam... Paypal FTW!
nickbaldwin86 is offline  
Reply With Quote
Old Feb 10, 2012, 09:16 PM   #11
Disruptor4
75 Posts
 
Join Date: Jun 2008
Location: Melbourne, Australia
Posts: 190 (0.10/day)
Thanks: 8
Thanked 20 Times in 16 Posts

System Specs

The details from my billing address are default to a non existent address and billing details are not in there AFAIK.
Disruptor4 is offline  
Reply With Quote
Old Feb 10, 2012, 10:24 PM   #12
RejZoR
3500 Posts
 
RejZoR's Avatar
 
Join Date: Oct 2004
Location: Europe/Slovenia
Posts: 3,963 (1.26/day)
Thanks: 39
Thanked 752 Times in 540 Posts

System Specs

Interesting, i never got any e-mail notification from Valve regarding this matter. I only found out about all this on various forums.
__________________
RejZoR's Little Secrets @ rejzor dot tk
RejZoR is offline  
Reply With Quote
Old Feb 10, 2012, 10:30 PM   #13
theJesus
2000 Posts
 
theJesus's Avatar
 
Join Date: Jul 2008
Location: Canton, Ohio
Posts: 3,116 (1.76/day)
Thanks: 2,301
Thanked 865 Times in 612 Posts

System Specs

Quote:
Originally Posted by stinger608 View Post
And that is why I only use my PayPal account for Steam, Amazon, NewEgg, etc...

PayPal is a PITA and many will flame the hell out someone using their services, however none of your credit card/debit card information is forwarded to online retailers.
Amazon doesn't accept PayPal . . .
__________________
HEAT
“congratulations! you have successfully been inflicted with tpuitis! symptons include: prolonged computer usage, urge to make tpu your homepage, posting at rapid posts-per-day ratios (also known as post whoring), and the urge to waste lots of money on high end computer hardware that you dont need!” -panchoman
“Modding to me is something best shared with others.... Kind of like a fine wine, but without the drunk driving arrest and hangovers.” -MKmods
“i'm going to punch you in the face now Jesus..” -BumbleBee
theJesus is offline  
Reply With Quote
Old Feb 10, 2012, 11:18 PM   #14
Mussels
Doctor Moderator
 
Mussels's Avatar
 
Join Date: Oct 2004
Location: Bendigo, Australia (NOT THE USA)
Posts: 34,551 (10.97/day)
Thanks: 3,699
Thanked 8,689 Times in 6,389 Posts

System Specs

Quote:
Originally Posted by DRDNA View Post
Hmmm...I wonder why I never received the email warning from steam? I just double triple checked too.
i didnt get it either. maybe they only sent it to the region who's files got hacked?
Mussels is offline  
Reply With Quote
Old Feb 10, 2012, 11:19 PM   #15
RejZoR
3500 Posts
 
RejZoR's Avatar
 
Join Date: Oct 2004
Location: Europe/Slovenia
Posts: 3,963 (1.26/day)
Thanks: 39
Thanked 752 Times in 540 Posts

System Specs

Are you sure? I've ordered some stuff from Amazon UK and i think my sister paid with PayPal. Or do they store credit card info like Steam does?
__________________
RejZoR's Little Secrets @ rejzor dot tk
RejZoR is offline  
Reply With Quote
Old Feb 11, 2012, 12:24 AM   #16
theJesus
2000 Posts
 
theJesus's Avatar
 
Join Date: Jul 2008
Location: Canton, Ohio
Posts: 3,116 (1.76/day)
Thanks: 2,301
Thanked 865 Times in 612 Posts

System Specs

Quote:
Originally Posted by Mussels View Post
i didnt get it either. maybe they only sent it to the region who's files got hacked?
I think it's just for people registered on the forums.
Quote:
Originally Posted by RejZoR View Post
Are you sure? I've ordered some stuff from Amazon UK and i think my sister paid with PayPal. Or do they store credit card info like Steam does?
They store CC info.
__________________
HEAT
“congratulations! you have successfully been inflicted with tpuitis! symptons include: prolonged computer usage, urge to make tpu your homepage, posting at rapid posts-per-day ratios (also known as post whoring), and the urge to waste lots of money on high end computer hardware that you dont need!” -panchoman
“Modding to me is something best shared with others.... Kind of like a fine wine, but without the drunk driving arrest and hangovers.” -MKmods
“i'm going to punch you in the face now Jesus..” -BumbleBee
theJesus is offline  
Reply With Quote
Old Feb 11, 2012, 12:28 AM   #17
cadaveca
My name is Dave
 
cadaveca's Avatar
 
Join Date: Apr 2006
Location: The Great White North
Posts: 10,770 (4.15/day)
Thanks: 4,485
Thanked 5,195 Times in 3,201 Posts

System Specs

Quote:
Originally Posted by theJesus View Post
I think it's just for people registered on the forums.
Nope, forum member, no email here.


I don't use CC or paypal for STEAM, so I don't care, nothing to be lost. But checking billing statements is always a good idea.


I get charged by the utility company for bloody rainfall, in land drainage charges, for example. Talking to my neighbours, very few even knew that was a charge.
cadaveca is online now  
Reply With Quote
The Following User Says Thank You to cadaveca For This Useful Post:
Old Feb 11, 2012, 12:29 AM   #18
Bjorn_Of_Iceland
2000 Posts
 
Bjorn_Of_Iceland's Avatar
 
Join Date: Jan 2008
Location: Húsið mitt
Posts: 2,606 (1.33/day)
Thanks: 479
Thanked 356 Times in 265 Posts

System Specs

Quote:
Originally Posted by nickbaldwin86 View Post
reason why I never put a debit/credit card on file at Steam... Paypal FTW!
But then you placed your debit/credit card detail on paypal so.. your back to square one.
__________________

SIEG HEIL!!
Bjorn_Of_Iceland is offline  
Reply With Quote
Old Feb 11, 2012, 12:43 AM   #19
BlackOmega
500 Posts
 
BlackOmega's Avatar
 
Join Date: Feb 2009
Location: Michigan, USA
Posts: 562 (0.36/day)
Thanks: 150
Thanked 157 Times in 117 Posts

System Specs

Quote:
Originally Posted by mrw1986 View Post
Here's something most people don't know about that feature...

The only kind of purchase that won't overdraw your account is if it's swiped physically. Making purchases online and EFT's will still overdraw your account. How do I know? I accidentally overdrew my account with an online purchase even though I used my debit card. They refunded me the charge because of a misunderstanding, but the new regulation clearly states it only prevents overdraws from an actual swipe of the card.

Edit: Also, as far as I know this is a standard regulation set down by the government. It's part of the opt-in/opt-out overdraw legislature.
That depends on the bank. I have my account set up the same as you, however, my bank will not allow it to get overdrawn regardless of whether iys physically swiped oe used online. Only caveat, any auto payments will still go through. Auto payments such as a recurring bill that comes out that you specifically setup through the bank. Steam and paypal do not apply to the autopay definition..
BlackOmega is offline  
Reply With Quote
Old Feb 11, 2012, 01:15 AM   #20
AsRock
TPU addict
 
Join Date: Jun 2007
Location: US\ Uk Born
Posts: 8,793 (4.07/day)
Thanks: 1,674
Thanked 1,348 Times in 1,170 Posts

System Specs

Quote:
Originally Posted by cadaveca View Post
Nope, forum member, no email here.


I don't use CC or paypal for STEAM, so I don't care, nothing to be lost. But checking billing statements is always a good idea.


I get charged by the utility company for bloody rainfall, in land drainage charges, for example. Talking to my neighbours, very few even knew that was a charge.
LMAO, we live in a house which has be devided into 2 places and there is one drainage system but both get charged.

Now you going have people putting plastic sheets over there houses and yard when it rains loool.


O yeah no email here either. Which if true they only sent them to who might of been had id stolen would mean there not telling the whole truth.
AsRock is online now  
Reply With Quote
Old Feb 11, 2012, 01:57 AM   #21
Mussels
Doctor Moderator
 
Mussels's Avatar
 
Join Date: Oct 2004
Location: Bendigo, Australia (NOT THE USA)
Posts: 34,551 (10.97/day)
Thanks: 3,699
Thanked 8,689 Times in 6,389 Posts

System Specs

Quote:
Originally Posted by AsRock View Post
O yeah no email here either. Which if true they only sent them to who might of been had id stolen would mean there not telling the whole truth.
no it doesnt. it means they're emailing the small percentage who were at risk.


american server but australian customer - why send me an email?
Mussels is offline  
Reply With Quote
Old Feb 11, 2012, 05:58 AM   #22
RejZoR
3500 Posts
 
RejZoR's Avatar
 
Join Date: Oct 2004
Location: Europe/Slovenia
Posts: 3,963 (1.26/day)
Thanks: 39
Thanked 752 Times in 540 Posts

System Specs

Well, crooks don't really care if you're american, australian, slovenian or an alien. If you have a credit card that they can charge, they will.
__________________
RejZoR's Little Secrets @ rejzor dot tk
RejZoR is offline  
Reply With Quote
Old Feb 11, 2012, 10:54 AM   #23
RejZoR
3500 Posts
 
RejZoR's Avatar
 
Join Date: Oct 2004
Location: Europe/Slovenia
Posts: 3,963 (1.26/day)
Thanks: 39
Thanked 752 Times in 540 Posts

System Specs

It turned out the message is not delivered through e-mail but through Steam when you login. Got it like an hour ago.
__________________
RejZoR's Little Secrets @ rejzor dot tk
RejZoR is offline  
Reply With Quote
Old Feb 11, 2012, 12:36 PM   #24
ypsylon
25 Posts
 
Join Date: Dec 2011
Posts: 27 (0.05/day)
Thanks: 0
Thanked 3 Times in 2 Posts

Who the hell in the right frame of mind using $team anyway? Bloody trojan and spyware in disguise.
ypsylon is offline  
Reply With Quote
Old Feb 11, 2012, 04:54 PM   #25
RejZoR
3500 Posts
 
RejZoR's Avatar
 
Join Date: Oct 2004
Location: Europe/Slovenia
Posts: 3,963 (1.26/day)
Thanks: 39
Thanked 752 Times in 540 Posts

System Specs

I'm not sure where you're pulling this nonsense from, but Steam is nothing like trojan or spyware.
__________________
RejZoR's Little Secrets @ rejzor dot tk
RejZoR is offline  
Reply With Quote
Reply


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is On

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Mirror's Edge Fans Should Keep Holding Their Breath For The Sequel qubit News 17 Oct 10, 2011 03:10 PM
My first CableCARD card; buying with credit card; maybe gift card. Card. streetfighter 2 System Builder's Advice 4 May 5, 2011 06:39 PM
Valve and NVIDIA Offer Portal: First Slice Free to GeForce Users malware News 23 Jan 10, 2008 09:19 PM
NVIDIA Asks Card Makers to Reduce Manufacturing Costs of 8800 GT Cards malware News 61 Dec 30, 2007 12:22 PM
games you should keep an eye out for in the future mr. James Games 7 Jul 7, 2007 01:48 PM


All times are GMT. The time now is 09:42 PM.


Powered by vBulletin® Version 3.8.6
Copyright ©2000 - 2013, Jelsoft Enterprises Ltd.
no new posts