PSA: Steam users have been hit by a cyber attack, ‘expect fake messages’

Wait 5 sec.

Valve is currently warning Steam Machine and Steam Controller Users in Europe that they have been hit by a cyber attack that leaked their personal information. CEVA Logistics, Valve’s logistics partner in Europe responsible for handling Steam’s hardware fulfilment, warned Valve on August 7. As spotted by DigitalFoundry, Valve is now warning that the breach didn’t compromise payment or password data, but it might include all sorts of personal information, such as IDs, addresses, country of residence, phone numbers, email accounts associated with Steam, and Steam hardware purchase information. Though this isn’t a worst-case scenario because the hackers cannot directly use this information to attack users, they can use it in other ways. Valve warns, “expect fake messages – email, SMS or phone – that mention your hardware order and appear to come from Steam, Valve or a delivery company. They may quote your address back to you to prove they’re genuine. They may ask you to confirm a delivery, pay a small customs or redelivery fee, or sign in somewhere to “verify” your order. Treat all of them as fake.” Valve also explained that it is currently pressing CEVA, the logistics partner, to learn about the full extent of the attack. They are “in the process of notifying the data protection authorities in the countries affected,” and that “CEVA has isolated the affected systems, taken all offline and brought in outside investigators.” In its official message, Valve included three details the company considers essential when dealing with suspicious information: “Three things that are always true – Steam Support only handles account issues at https://help.steampowered.com/. Never by email, Steam Chat, or Discord. Anyone who contacts you elsewhere claiming to be Steam Support is not. – Every real Steam login page is on store.steampowered.com, www.steampowered.com, steamcommunity.com or help.steampowered.com. Type the address yourself rather than following a link someone sent you. – Steam Support will never ask you for your password or a Steam Guard code. Neither will a courier.” Should any more questions regarding this incident arise, the best way to find answers is always via the Steam Support page.The post PSA: Steam users have been hit by a cyber attack, ‘expect fake messages’ appeared first on Destructoid.