Wednesday, 19 June 2013
Hackers swiped Steam transaction data, Valve says
Hackers swiped Steam transaction data, Valve says
By Lucian Constantin, IDG News Service | Feb 15, 2012
1 comments
Digg
PrintValve has informed users of its Steam online game distribution platform that hackers have probably downloaded encrypted credit card transaction data from a backup database during an intrusion last year.
In November 2011, Valve announced that hackers gained unauthorized access to Steam's user database, but said that there was no evidence to suggest a leak of encrypted credit card details at that time.
However, that has since changed. "Recently we learned that it is probable that the intruders obtained a copy of a backup file with information about Steam transactions between 2004 and 2008," said Gabe Newell, Valve's co-founder and managing director, in an email sent Friday to Steam users.
According to Newell, the backup file contained Steam user names, email addresses, encrypted credit card details and encrypted billing addresses, but no account passwords.
Valve doesn't have reasons to believe that the sensitive transaction data was decrypted, Newell said. However, this possibility should not be excluded.
"As I said in November it's a good idea to watch your credit card activity and statements," Newell said. "And of course keeping Steam Guard [a Steam account security system] on is a good idea as well."
The company decided to send the email to Steam users before sending official breach notification letters as required by some states when credit card information is involved.
Similar
Add comment
knowledge_central_tab
Knowledge Central
Accelerating the Deployment of the Evolved Cyber Range
Ixia BreakingPoint creates an Internet-scale cyber range environment from a single 7-inch-high device for arming and training cyber warriors. Learn how BreakingPoint can be used by organizations to defend national interests by assessing, educating, and certifying elite cyber warriors and equipping those forces to harden the resiliency of critical network and data center infrastructures.
A Six-Step Plan for Competitive Device Evaluations
This paper presents a six-step methodology for conducting competitive product evaluations that provide advance insight into the performance, security, and stability of devices within production network and data center environments. Following this will give insights on how to evaluate and select the network or security devices for Enterprise, Federal, and Carrier Infrastructures
A Case Study of Eurograbber: How 36 Million Euros was Stolen via Malware
This is a case study about a sophisticated, multi-dimensional and targeted attack that stole an estimated 36+ million Euros from more than 30,000 bank customers from multiple banks across Europe.
Symantec, Singapore school partner to nurture next-generation security talents
Symantec Corp. and the Singapore Management University will jointly train and equip IT security professionals with the latest knowledge and skill sets in information security.
I am glad that I only play
I am glad that I only play Jewel Quest Solitaire. Don't get me wrong, I am sorry for the guys that play games using the Steam platform, but that should be a lesson for Valve to upgrade their security.