WARNING: Steam database a mess, hold off buying today until fixed

[Aevis]

No info on whether it is a DB hack or Steam bug etc, but if you go into your Account --> Account details, you'll be in someone else's account and can check stuff like purchase history.

I suggest to switch into offline mode. You can't remove your CC information since you can't access your own data, but you could notify your CC company to refuse any transaction. Also, if you use your Steam password on another site/account, change it immediatly.

If you enabled pre approval payment on PayPal, go to PayPal > pre approved payments > Valve > Cancel.

Edit: it seems like Valve finally took Steam store and account servers offline.

Edit2: Valve's statement to Kotaku:

Steam is back up and running without any known issues. As a result of a configuration change earlier today, a caching issue allowed some users to randomly see pages generated for other users for a period of less than an hour. This issue has since been resolved. We believe no unauthorized actions were allowed on accounts beyond the viewing of cached page information and no additional action is required by users.

[Silenka]

https://www.reddit.com/r/Steam/comme...team_websites/
https://www.reddit.com/live/w58a3nf9yi53

It's a caching issue.

[Corrderio]

Store seems back up, but not picking up my account. Kinda paranoid of trying to sign in.

[Aevis]

https://www.reddit.com/r/Steam/comme...team_websites/
https://www.reddit.com/live/w58a3nf9yi53

It's a caching issue.

Everyone is just quoting SteamDB which is not affiliated with Valve in any kind. Don't spread that. Until Valve says something, we have no clue what really happend.

[Sonomaa]

edited the subject since it seems to no be a breach but a giant database getting fucked up due to probably ddos

[Corrderio]

Everything seems fine in the meantime. But I unlinked my PayPal in the meantime until Valve says something about what happened.

edited the subject since it seems to no be a breach but a giant database getting fucked up due to probably ddos

And cue the "Hacker" articles ...

[Aevis]

Valve sent a statement to Kotaku:

Steam is back up and running without any known issues. As a result of a configuration change earlier today, a caching issue allowed some users to randomly see pages generated for other users for a period of less than an hour. This issue has since been resolved. We believe no unauthorized actions were allowed on accounts beyond the viewing of cached page information and no additional action is required by users.

I like how they don't mention that those cached page information involves your account name, email, adress, phone and last two CC digits and "some users" refers to any person who checked their account details during that hour.

[6souls]

I jumped onto my cousin's steam account before this news broke and found it odd that it was all in Russian. Good to see the damage isn't so bad.

[Thulius]

Valve sent a statement to Kotaku:


I like how they don't mention that those cached page information involves your account name, email, adress, phone and last two CC digits and "some users" refers to any person who checked their account details during that hour.

I'm not exactly a cyber sleuth but all I saw during this debacle was account name, email, last 4 digits of phone# and last 2 CC digits. Is there any actual proof that anyone was getting more than that?

It's definitely disingenuous to not mention that stuff at all, but that's hardly enough information for anyone but the most paranoid to feel compromised.

[Churchill]

Everyone is just quoting SteamDB which is not affiliated with Valve in any kind. Don't spread that. Until Valve says something, we have no clue what really happend.

I mean, if you know anything about computers you'd know it wasn't a breach from the get-go lol.

The initial post in this thread was ridiculous and on top of that, being in offline mode was one of the worst (and I mean the worst) suggestions to 'fix' the problem I've ever seen.

A breach would imply someone would have some type of access to something important, instead of every random steam user having random access to a random other steam user (gee, like there was an issue with a database cache or something) As much as I really wanted to have access to Striker11077's steam account (Shadowblade to his friends) as that nigga spent like 300$ on in-game GTA5 money (wtf?), I doubt someone gave me access to that specific idiots account.

[Aevis]

The initial post in this thread was ridiculous and on top of that, being in offline mode was one of the worst (and I mean the worst) suggestions to 'fix' the problem I've ever seen.

It wasn't meant to "fix" the problem, but not to refresh any information until Valve takes the servers down. That was the general notion on any site (gaf, kotaku, steamdb, gamespot etc.).

[6souls]

http://store.steampowered.com/news/19852/

DDOS is to blame.