Here's a statement from Valve on the reported Steam data breach

There’s been studies of a Steam knowledge breach just lately, and as a substitute of leaping the gun I reached out to Valve first to see what was happening.

From what I can inform the studies originated on LinkedIn from “Underdark.ai” that claimed there was a “Huge Alleged Steam Knowledge Breach: 89M+ Information for Sale”. This was then picked up on X/Twitter, after which a lot of information web sites posted it up. The preliminary report talked about the corporate Twilio, who advised me earlier as we speak:

There is no such thing as a proof to counsel that Twilio was breached. We now have reviewed a sampling of the information discovered on-line, and see no indication that this knowledge was obtained from Twilio.

A Twilio Spokesperson

Subsequent up, the total assertion despatched to me by Valve:

Yesterday we had been made conscious of studies of leaks of older textual content messages that had beforehand been despatched to Steam clients. We now have examined the leak pattern and have decided this was NOT a breach of Steam techniques.

We’re nonetheless digging into the supply of the leak, which is compounded by the truth that any SMS messages are unencrypted in transit, and routed by means of a number of suppliers on the way in which to your telephone.

The leak consisted of older textual content messages that included one-time codes that had been solely legitimate for 15-minute time frames and the telephone numbers they had been despatched to. The leaked knowledge didn’t affiliate the telephone numbers with a Steam account, password info, cost info or different private knowledge. Previous textual content messages can’t be used to breach the safety of your Steam account, and every time a code is used to alter your Steam electronic mail or password utilizing SMS, you’ll obtain a affirmation through electronic mail and/or Steam safe messages.

From a Steam perspective, clients don’t want to alter their passwords or telephone numbers on account of this occasion. It’s a good reminder to deal with any account safety messages that you haven’t explicitly requested as suspicious. We advocate usually checking your Steam account safety at any time at https://store.steampowered.com/account/authorizeddevices.

We additionally advocate Steam customers arrange the Steam Cell Authenticator in the event that they haven’t already, because it provides us one of the best ways to ship safe messages about their account and that account’s security.

Valve Press