A very large data breach has affected the popular gaming platform Steam. Personal details of about 89 million user accounts have been leaked online. This is one of the biggest data leaks in the gaming world.
What is being alleged?
What is being alleged?
According to these reports, a dataset containing user information was found circulating in an online forum. The alleged source of this data is believed to be a third-party service linked to Steam, rather than a direct breach of Steam's own systems.
When and where did this alleged leak surface?
When and where did this alleged leak surface?
The data reportedly appeared online in May 2025 on a website described as not being secured. The focus of the investigation appears to be on websites or tools that interact with Steam's services.
What data is reportedly compromised?
What data is reportedly compromised?
The information in the alleged leak is said to include Steam usernames, and potentially email addresses and phone numbers.
Some reports also suggest the presence of two-factor authentication (2FA) codes and SMS logs, raising concerns about potential phishing and account hijacking attempts. It is currently unclear if passwords were directly compromised in this alleged breach.
Is your Steam account potentially at risk?
Is your Steam account potentially at risk?
If you have linked your Steam account to third-party websites or tools, your data may be among the information being circulated. Users are advised to be vigilant for any unusual activity on their accounts or suspicious communications.
What you should do now
What you should do now
You should change your Steam password immediately. Turn on two-step login using Steam Guard. Don't use websites or tools that aren't official. Keep an eye on your account for anything unusual.
Steam Owner Response
Steam Owner Response
As of the latest reports, Valve, the owner of Steam, has not issued an official public statement regarding this alleged data breach. Reports indicate that a Valve representative has denied using a specific third-party service (Twilio) that was initially rumored to be involved. Twilio has also denied experiencing a breach.
Stay safe, gamers
Stay safe, gamers
The gaming community can be a target for cybercriminals. Practicing good online security habits, such as using strong, unique passwords and enabling two-factor authentication, is crucial in protecting your valuable accounts. Share this information with your friends to help them stay safe as well.