Steam Says There's No Need to Change Your Password After Data Breach. But Set Up This Safety Feature Anyway
- A data breach reportedly affecting around 89 million Steam user accounts emerged on May 10, 2025, via a dark web forum auction.
- The breach appears to stem from a third-party service used for Steam’s two-factor authentication, with Twilio denying involvement and Valve denying a direct breach.
- Leaked data allegedly includes real-time SMS two-factor codes and phone numbers, but does not link phone numbers or passwords to Steam accounts, raising potential phishing concerns.
- The threat actor offered the dataset for $5,000, while Steam advised users that password changes are unnecessary but recommended enabling the Steam Mobile Authenticator for extra security.
- This incident highlights continuing cybersecurity risks for Steam users and suggests adopting two-factor authentication to better protect accounts against unauthorized access.
12 Articles
12 Articles
Hackers reportedly selling over 89 million Steam user records after alleged data breach — Here’s what that means and how to protect your data
A hacker was found selling what the person claims to be millions of Steam account user details on the dark web. Here are details about the alleged incident, how you can check if you’ve been part of a data breach, and what to do if your data is compromised.


Hackers reportedly selling over 89 million Steam user records after alleged data breach— Here’s what that means and how to protect your data
A hacker was found selling what the person claims to be millions of Steam account user details on the dark web. Here are details about the alleged incident, how you can check if you’ve been part of a data breach, and what to do if your data is compromised.
Steam addresses dark web phone number leak claims
Steam has denied that a reported data breach endangered its users’ personal information after 89 million phone numbers linked to Steam accounts were leaked and put up for sale on the dark web. The leak, first reported by cybersecurity company Underdark on LinkedIn, included text messages with validation codes and the phone numbers they were sent to. However, Steam stated that the leaked data did not link the phone numbers with Steam accounts, pa…
Did A Steam Data Breach Compromise 89 Million Accounts? Valve Responds
Valve has responded to reports of a major data breach in which Underdark.ai, a cyber threat intelligent service, highlighted a dark web forum post by a hacker claiming to be in possession of 89 million Steam user records. According to Valve, which has been pretty good at keeping on top of security, there is nothing for Steam users to be worried
Coverage Details
Bias Distribution
- 75% of the sources lean Left
To view factuality data please Upgrade to Premium
Ownership
To view ownership data please Upgrade to Vantage