Steam account hacked and stolen last night.

mikeysthoughts

To round off a spectacular week (car bumped into last weekend by a driver not looking where he's going), I received an SMS text to my personal phone last night stating they had processed my request to change the telephone number on my account.

I powered up the laptop and tried to log in, but the email address and password have been changed. I use two-factor authentication on all of my email addresses and I can't see any evidence these have been logged into without my permission.

Given I've had this account for over 10 years without changing any personal info, I'm confident Valve/Steam will recover my account to me. Still, it's a worry as it's my main games vault with a library easily worth over a grand.

Constant vigilance, people.

sputnicki63

All the best recovering your account.  
  Time to review security on my Steam account.  Thanks for the warning.

enigma1701

Did you have any luck getting it sorted?

mikeysthoughts

Not yet. They've asked for proof of certain things (PayPal account, certain keys) which have been provided.

enigma1701

Cool, I'd like to think they can verify stuff to sort it out. But if it's two factor authentication, how does that get hacked?

mikeysthoughts

Good news, it was returned to me this morning. Steam were pretty good

I don't know how it was done, but I think my old, old hotmail account was compromised, allowing someone to verify their attempts to enter via my Yahoo email account. Dunno. Anyway, all passwords updated and redundant accounts now secured.

mossym

i got an alert last night( think i got one last week and didn't pay too much attention) that someone had logged into my account and triggered the two step authentication, they had my password. changed it first thing this morning.

always found 2 step authentication a pain but then you get reminded why it is useful

MarkyPancake

Glad you got it sorted.

I moved all my console gaming accounts over to TFA where possible recently and reviewed the email addresses and reduced which ones could log into my Microsoft account.

MartinH32

Someone attempted to get into my Steam account last year. I got an email triggering a code to enter. Thankfully I've two step set up, but still don't know where or how they god my password

mikeysthoughts

I use Lastpass password vault and it generates sillystrength passwords, but even so without two factor authentication I now feel insecure.

I did a security test through lastpass after this breach and there were a number of known security breaches it flagged up across a fair few websites. I was surprised at how many big names had been compromised in recent years.

It is possible that the cleverest of hackers would be able to piece together information gathered across multiple breaches to target certain high value accounts.