A lone hacker has stolen credit card information from Valve's customer database. Physics gun not used.
Update:
1UP has had
the chance to talk to Valve software's Doug Lombardi about the so-called breach. He says that
"There has been no security breach of Steam, the alleged hacker gained access to a third-party site that Valve uses to manage the commercial partners in its Cyber Café program. This Cyber Café billing system is not connected to Steam. We are working with law enforcement agencies on this matter, and encourage anyone with more information to e-mail us at Catch_A_Thief@valvesoftware.com."
This should hopefully reassure any end users worried that their credit card information has been compromised. However, if you're a Cyber Café owner and haven't already cancelled your credit card -- get onto your bank as soon as possible.
-- Tim
the story remains in its original form below
Valve may be in a spot of bother,
Daily Tech reported yesterday, after a hacker has managed to infiltrate their financial records.
The hacker, who goes by the alias of 'MaddoxX', managed to access not only Valve's financial information, but also the credit card information of an unknown number of Steam customers as well as error logs and a partial listing of Valve's Cafe directory.
MaddoxX has announced that on top of this that he
"has shell access everywhere". He has also posted a list of login details so that other hackers can create fake Cafe certificates.
Although neither Valve nor MaddoxX have announced how much credit card information was stolen, it's strongly suggested that all Steam users keep an eye on their accounts for a while.
MaddoxX is now apparently holding Valve to ransom, demanding in emails that the company offer him
"something good" or he will release all information he has. This would include putting all of the credit card information into a spreadsheet that he would distribute.
If you think you might be affected by this hack, or if you just savour a chance to rub Valve's nose in it, then why not join us down in the forum and
let us know!
Yikes! I'm glad I havent bought anything through Steam!
This better get resolved quickly.
Fixed ;)
That's why I only bought one thing via steam and even that stuffed up!
i hope valve dont give in with the **** of a hacker, because he can just realse the info he has already.
i am so happy that i purchase over the counter, and dont own a cerdit card!
Russian, eh? Maybe this "something good" he's looking for is just a bottle of Vodka. God damn Russians, lol. :D
Lol i dated a russian and her father always had atleast 5 bottles and a handle of vodka around.
That sucks but i wonder how to get these cafe certificates?! lol....
I'm guessing he gets caught - then hired *#%&@! :(
Friends works flawlessly for me, as well as Favorites.
They have been revamped recently.
I hope the CC info only is for cyber cafes, because I think Steam only knows the last 4 digits of credit cards numbers: if I want to buy a new game I have to retype the number.
I used my FATHER's credit card, telling him it was secure, and now this happens... bugger.
i got mine when they were still around before hl2 came out.
Andy
I wouldn't get too worried yet.
If people are interested, www.mycashplus.co.uk I think is the site. At least if someone gets hold of your card details, they can only spend what little you keep on that card (normally I keep about £50 at a time on it).
It has taken a fair while for the Steam servers to be well and truely hacked, so I think they did a pretty good job of keeping them faily secure.
Something good could be anything, mabey he is trying to get ep 2 released earlier.
I trusted Valve. It's a huge company, you expect them to have decent security.
Steam wasnt hacked, just Cyber Cafe stuff
also, here
i like steam, they are easy and no shipping/tax charges : )
Excuse me for enjoying acts of anarchy.
No one will die or get hurt, at most The credit card #'s will be distributed to those who can exploit them. I would assume the Credit companies have counter measures fr such situations.
I've lived in many places on the planet where Steam is innaccessable, and therefore my favortie games were inaccessable. I've had stolen or lost 3 steam accounts! I Like my games as property, not just as a # on some server that anyone (obviously) can hack and steal. The old way worked fine as CD's and DVD's.
Now steam will change in two ways: 1. Secuirity of accounts will be "safer". 2. Complaints stated by Half Life, CS, and users of steam will taken with greater attention.
"Maddox's" intentions don't look like a thief's, but rahter someone passionate about their games.
Repeat after me: the end does not justify the means
Tell that to w bush
PS I don't regret it. :) Best $10 I ever spent.
http://72.14.253.104/search?q=cache:s_RnckPD3CUJ:emp.damage-web.net/viewtopic.php%3Fp%3D62590+MaddoxX%40no-steam.org&hl=en&ct=clnk&cd=1&client=opera
Thank god for Google Cache :)
That the guy is a: rusian, france, polish, american, isreal, dutch, german belgian, english, ukrain person and that alot of people know someone that knows him personaly...
And he is a: radical, relegios, antigamer, idiotic, sociopathic, loving, appreciated, awesome, godlike, frustrated, crazy, mad, nuts, crackedup, dope, hacker, cracker, coder, noob, 1337, wanabe, gamer, scriptkiddy...
That wants nothing more then: Bring down valve, steam, games, creditcard companies, your/them/their creditcard info, your/their/them money,blame someone/something, freck other gamers, money, spread fear, fame, selfenrichment, rule, proof to someone/something, a girl, and other weird stuff and speculations...
:?
Also, i'm pretty sure that it isn't legal for any company to store your card details once the transaction has cleared. (well apart from the last few digits of the main strip number for cross referencing puropses)
Also, how sloppy is that guy lol, bound to get busted any moment
"We are a cyber cafe member of valve. I can verify this theft as well as also make some corrections. The account information was stolen many weeks ago, in late March. It wasnt until Easter that the hacker contacted some of the cafe owners to show them and released the information. Also, Valve has NOT made any attempt to contact the cafe owners affected and continual has been caught with contradicting responses when questioned by us.
Valve chose not to contact those at risk and still has yet to do so. The cafe owners who are a part of igames.org (a popular cyber cafe ownership program) found out about this and we are furious. I contacted Doug at Valve myself and was told We arent required by law to inform you of your information being stolen."
oooooooo......... BURNED!!!!
hahaha...
nobody's gonna get hurt from loosing their creditcard number - incredibly naive point of view, eh?
with the exception of somebody's truly depressed with his financial got hacked for $1,000,000 and decided to do something stupid....
99% stolen money from creditcard theft/fraud is usually buffered by the bank, meaning the owner will get into a bit of a hassle, but the bank's usually the one that gotta do the big paperwork to pull the money out of insurance or their own pocket.... and thats it.
maybe people watch Swordfish too many times........
1.Nothing has been stolen, only flaunted at this time. How is it theft if nothing has been stolen???????????????? HOW??? HOW????!!!!!!!!!!
2.It's not an assumption, all credit card companies have counter measures and are completly reliable for the theft and/or the business trafficing the info.
3. Boycott? And not play the games I find entertaining and spectacular? Not play the games I've been playing since I was 17?
4. zndkwin said it best...
5. Very funny ObiWan :D This Maddox guy has found Geek stardom with all this gossip!
I am pretty sure valve (STEAM) does CC payments on their own. IE they don't 3rd party that stuff.
This means that they would HAVE to keep all the information locked up somewhere be it for logs and for the transaction in the first place (though for one time transactions, they may not save anything once it gets passed through)
but the CC numbers are DEFINITELY stored for cybercafe accounts since its a recurring bill
I also hate how they say that the cybercafe accounts get EVERYTHING, because im looking at a cybercafe steam account right now, and i cant get access to half the games...
(some new ones arent showing up on the list, but when i go to purchase the game, it says i already own it... WTF?)
I don't know how you can talk about steam so negatively...
The concept is rock solid, and the current implementation of it is always evolving and getting better.
people bitch and moan about their games not working because they dont have the internet yadda yadda, but then you want companies to also lower the retail prices ???
Steam could be used to cut out the middle man completely, no boxes to make, no paper manuals to print, and no CDs to press. eventually it will allow for games to be cheaper.
Also, all of steams non MP games can be played without an internet connection, you just need to be able to connect ONCE to tell it you want to run these games in offline mode from now on...
I also think that this may already happen in the background when it detects that its offline.
less than three Garry