Valve Hacked

[StevenNevets]

Valve's Steam content distribution system has apparently been hacked. The culprit allegedly got deep enough into the system to steal credit card information and financial information on Valve. DailyTech reports the hacker known as "MaddoxX" broke in and obtained:

* Screenshots of internal Valve web pages
* A portion of Valve's Cafe directory
* Error logs
* Credit card information of customers
* Financial information on Valve

MaddoxX posted the information he obtained on an anti-Steam website. He has also threatened to release a spreadsheet of the credit card information. We've contacted Valve for a statement on this alleged breach in security.



http://www.dailytech.com/STEAM+Hacked+User+Credit+Cards+May+be+at+Risk/article6972.htm

[Drayu]

stuff like this piss me off!

[KrystalStarWolf]

...... Okay, time to contact the bank, cancel a credit card or two, and get my things secure.

[Blis]

Would'nt valve be liable for any losses from peoples credit cards if it was their system it was stolen from?

PS.I could be wrong but I think I know the name maddoxx.From what I remember he had something to do with making a steam emulator or extracting sp games so they can be played without steam.I'd guess he hacked vavle to find out more about doing that sort of stuff rather than for credit card fraud purposes.

[Grim_Scythe]

Well guess I get to wait and see if he got my CC....then again I don't remember how I paid....Paypal? :dunno: It is alleged i am waitng for a statement by them...

[Killerfurby6]

i am happy that i bought my CD in a shop!!
but i realy hate idiots like that guy!!

[StevenNevets]

i am happy that i bought my CD in a shop!!
but i realy hate idiots like that guy!!Same and same.
Got the pack at bestbuy

Maybe he disliked steam, I think it's great though.
But how could he have hated it so much that he spent hundreds/thousands of hours trying to mess it up in whatever way possible?

Realy lame.

[Vash]

But how could he have hated it so much that he spent hundreds/thousands of hours trying to mess it up in whatever way possible?

By not having a girlfriend of course.

[Gruthar]

You'd think Valve would learn from being hacked the first time...

[[W33T] JimmytehHand8]

WTF... seriously, this is crap. So now, my debit card information is in danger because some little prick has some sort of vendetta with Valve? That's complete garbage.

[Grim_Scythe]

Well do what I just did transfer most of your money into savings.
Just in case until I figure out how did I pay Valve before....I thought I used paypal for it. Can you use paypal?

[Drayu]

Did you have to give credit card info when signing up? I bought the game out right, not through the service.....so would I have had to enter my info?

[JuicedYeti]

I bought it at Bestbuy no info was needed to sign up besides my e-mail info.

P.S. what a tard, I've heard of this same person doing the same thing about a year ago. nothing happened to him then either.

[Tykwer]

Did you have to give credit card info when signing up? I bought the game out right, not through the service.....so would I have had to enter my info?

nope, i wouldnt have been able to play the game if that were the case

[Goldragon]

Would'nt valve be liable for any losses from peoples credit cards if it was their system it was stolen from?

Depends on state regulations. In California for example, whenever a company that does business in CA has a data breach that exposes personal information, that company MUST notify the people in question by both snail mail and e-mail (e-mail only when available) within a reasonable timeframe. Once they have notified the people whose data has been breached, the company is no longer liable. Companies can take extra steps, such as paying for a credit watch for each person affected, or providing information on how to lockdown accounts (i.e. placing a fraud alert on your credit reports through one of the credit reporting agencies).

At any rate, their liability is limited once they go through the necessary steps.

For more information on ID Theft, checkout the FTC's website on ID Theft here:
http://www.ftc.gov/bcp/edu/microsites/idtheft/

[[W33T] JimmytehHand8]

Well do what I just did transfer most of your money into savings.
Just in case until I figure out how did I pay Valve before....I thought I used paypal for it. Can you use paypal?

Yeah, but I can get a negative balance on my checking (through my debit card). I've got to check with my bank tommorow. I'm slightly reassured that I think there is a limit to how much I can spend on my debit card and I also think that my card will prevent me from buying anything if my checking balance goes into the negatives.

And Drayu, this only really should worry you if you've ever purchased a game through steam. If you've bought CS:S or HL in stores you should be fine.

[Goldragon]

http://www.theregister.co.uk/2007/04/19/valve_steam_hack/

Interesting read. Looks like they got in touch with MaddoxX for an interview. Check out his responses.

[Grim_Scythe]

Hmm can explain why I didn't see much on Steam boards. However the article says that he has CC and transaction info from March of this year I assume. So perhaps it may be safe to say if you haven't bought anything thru Steam lately you might be okay. :dunno: Last time I bought something was when I was forced to get steam to play CS.

What a wierd hacker...asking for something good and an excuse from them about this back door he got into....

[Caruso]

I think he doesn't want the credit Card info i think he just wanted to show them how easily it could be done but still not a great idea on Valves part to not announce it.

[Klickinater]

Update 04/19/2007: Doug Lombardi, director of marketing at Valve, contacted DailyTech with the following statement:

There has been no security breach of Steam. The alleged hacker gained access to a third-party site that Valve uses to manage the commercial partners in its Cyber Café program. This Cyber Café billing system is not connected to Steam. We are working with law enforcement agencies on this matter, and encourage anyone with more information to e-mail us at Catch_A_Thief@valvesoftware.com.


So Steam wasn't actually hacked, still a wonder at why someone would do this.

[Grim_Scythe]

So this effects users rom the Cyber Cafe billing system?

I don't recall them having that when Steam started...anyone know?

[TIGER]

the 2 pictures that was shown on DAILY TECH if u look realy close on the second one it was photo shoped
a few things were added on taken out
looksl ike it was repositioned on top left in the white area
something not right