Should You Change Your Password After the Steam Leak? This Cybersecurity Expert Says Yes

Importance Score: 85 / 100 🟢

If your phone number was among the 89 million exposed in the recent Steam data breach, the company asserts your information remains secure. In a statement provided, Steam refuted reports of a data compromise that jeopardized users’ personal details.

“Old text messages cannot be exploited to compromise the security of your Steam account,” the statement clarifies. “Whenever a code is utilized to modify your Steam email or password via SMS, you will promptly receive a confirmation through email and/or secure Steam messages.”

The company further stated that the breach did not originate from a Steam system, ensuring users there’s no need to alter their passwords. Steam emphasizes that the compromised data cannot be linked to Steam accounts, passwords, or payment details.

However, your phone number is still considered personally identifiable information, potentially furnishing scammers with enhanced resources for targeted phishing attempts. Changing your password remains a proactive measure to reinforce your account’s defenses.

Here are several additional methods to safeguard your account.

Details of the Alleged Leak

First reported by Underdark, a cybersecurity firm, the information pertaining to 89 million Steam accounts surfaced for sale on the dark web. Steam denies the leak emanated from its systems, and the breach’s source remains unverified. The compromised data purportedly encompasses users’ one-time passwords and phone numbers. The purported threat actor is reportedly auctioning off this data for $5,000.

Is There Cause for Concern Regarding Your Leaked Phone Number?

“In the past, an exposed phone number wasn’t even deemed a breach, as the majority of us openly shared them,” noted cybersecurity fraud expert Neal O’Farrell.

“However, presently, a phone number is intimately interwoven with our identity — attempting to access your bank account without it exemplifies the issue — rendering it a prime target for criminals.”

Steam conveyed that users need not update their passwords. Nevertheless, the company advises regular scrutiny of your Steam account security.

Still, when concerned about a potential security breach, altering your password is a judicious step. If you possess a Steam account, proactively changing your password to secure your game library and financial details is a prudent decision.

Enhance Your Steam Account Security

Even if deemed unnecessary, changing passwords remains a beneficial measure for Steam account users. At minimum, this action bolsters the security of your account.

For an added layer of protection, consider using a password manager to generate complex passwords and securely store them for you.

Steam advocates setting up the Steam Mobile Authenticator, which initiates two-factor authentication via your phone number and email. Implementing 2FA markedly diminishes the likelihood of unauthorized access to your account. While Steam doesn’t facilitate hardware security keys, its native 2FA offers an impactful mechanism to secure your account.

If you currently use 2FA, consistently monitor your email for any suspicious activity correlated with your Steam account.

Steps to Change Your Steam Password

  1. Launch your Steam client.
  2. In the top-left corner, click “Steam” and select “Settings.”
  3. Access “Security” to verify that 2FA is operational. Input your email/phone number if it hasn’t been added.
  4. Choose “Change Password” at the top.
  5. Design a potent password incorporating symbols, uppercase and lowercase letters, and numbers, maximizing its length.

Should you recently receive unsolicited one-time password text messages, disregard them and regenerate your password. In the upcoming weeks, maintain vigilance for phishing attempts disguised as game product promotional offers or other Steam-related content.

“Beyond simply changing all passwords, even when advised against by the company, remain perpetually vigilant for phishing emails, texts, and calls, whether linked to this specific breach or not,” O’Farrell cautioned. “And, if available through your phone provider, enable SIM protection to hinder thieves from illicitly transferring your number.”


🕐 Top News in the Last Hour By Importance Score

# Title 📊 i-Score
1 As a heatwave approaches, experts say US sunscreens are less effective than those abroad 🔴 72 / 100
2 India to decide on overseas analysis of Air India crash flight recorders 🔴 72 / 100
3 European proposals in Geneva unrealistic — TradingView News 🔴 72 / 100
4 Russia slams state of German economy while facing problems at home 🔴 65 / 100
5 With Emmy voting underway, Ramón Rodríguez wants to break barriers for Latinos on TV 🔵 50 / 100
6 Bill Maher Slams TV Dads and “Performative Pussy-Hood” in Father’s Day Rant on ‘Real Time’: “Can’t the Pendulum Ever Land in the Middle?” 🔵 45 / 100
7 Dan Bucatinsky on if ‘The Comeback’ Season 3 could happen 🔵 45 / 100
8 New problem has locals in Majorca raging – 'it's disgraceful' 🔵 45 / 100
9 Wooden floors stay clean and dust free if you spray 1 kitchen ingredient around your home 🔵 45 / 100
10 Senegal women’s basketball team members denied US visas, prime minister says 🔵 45 / 100

View More Top News ➡️