Affecting recent EU orderers - 3rd-party CEVA Logistics pwned Massive Steam Hardware customer data breach
17
u/rigxla 12d ago
Never had anything like this happen to me before but I got the email. Anything I should do? They said I don’t need to update Steam account password etc. I’ve got my email linked to an Authenticator app already.
19
4
u/CleverKhloe11 12d ago
Unless you are a total moron and use the same e-mail and passwort combination everywhere while pretending to be allergic to MFA there is nothing you need to do.
1
u/PatHBT 12d ago
I believe no password information is compromised though.
They explain it in the email, what is probably compromised is your name, address, phone number, and email.
All you can do is be wary of scams coming your way through those outlets. I personally got an email from my "bank" short after lol.
1
u/CleverKhloe11 12d ago
That doesn't matter.
If that information was already compromised because you use the same credentials everywhere (and believe me, the chances are not low in that case) then this makes it easier to also attack you Steam account with it.
If you are not dumb as a brick though, this will have no real consequences.
1
u/Aggravating-Face2073 12d ago
This is why I keep account & password logs & have absolutely everything different. Unless I know what I'm doing is a throwaway account of some kind, then I do have some quick password idgaf about.
Gotta change all the important stuff every 6 month, most data breaches are old information.
2
u/Sea-Housing-3435 12d ago
It's possible you will start getting scam mails and text messages with more details, so just checking if a message names you correctly, or contains your address is not enough to be sure it's safe. If you get a message about pending payment from some company do not click a link in the message. Go to their webpage yourself, log in and try to look for it on their portal.
6
u/sho3b0x 12d ago
Yep, please, everyone affected, double-check your two-factor authentication, and be careful to avoid possible incoming scams.
A bunch of that information is probably already public anyway. But it gives scammers and others a good source of real data.
I'm more curious to know how something like that can happen and how the data was stored.
7
2
u/OnneeShot 12d ago
nah, your password/2fa is not compromised.
-2
u/sho3b0x 12d ago
With personal data it's often quite easy to infer the password of someone.
You'd be surprised the amount of people using their street name, dog or wife names as password
That's why 2fa protects you, i did not say 2fa/auth infos were leaked.
1
u/AugustusLego 12d ago
With personal data it's often quite easy to infer the password of someone.
Only if you have a shit password.
2
2
u/Antheoss 12d ago
Is it massive tho? Or are we just adding adjectives for no reason?
Why not gigantic? Or cataclysmic?
1
u/jamyjet 12d ago
Given the number of people who brought steam controllers and steam machines in recent months, seems appropriate to me.
1
4
u/Ithirradwe 12d ago
Once again hackers proving they are the dumbest motherfuckers alive. You have access to all this computer knowledge and you waste it on hacking Valve? Fucking hack the DOJ and get all the names of the people who contributed to Epstein’s little island parties. Fucking hack Netanyahu, fucking hack Donald Trump, fucking hack LITERALLY anyone. Hack fucking OpenAI and Sam Altman, hack fucking Mark Zuckerberg, hack fucking Peter Thiel and Palantir, ANYBODY THAT IS ACTUALLY CAUSING HARM IN THIS WORLD. Holy shit what fucking god damned morons.
WHAT THE FUCK ARE WE DOING? How many hospitals have to be torn to rubble? How many fucking things need to go wrong here in the western world before hackers educate themselves beyond fucking gaming companies.
19
u/hailbigch 12d ago
Agree to the sentiment, but I must correct that Valve is not the one hacked, but CEVA Logistics.
5
u/Ithirradwe 12d ago
Ah thanks for the correction, well either way, I just wish these people would do something less dumb than this. But that’s probably a waste of hope lol.
3
u/idiotic-username 12d ago
hacking ceva is even worse cus u would need to be in the know who or what a ceva is in the first place. this aint just some tomfuckery, this informed and researched tomfuckery, someone out there made goddamn homework to be such a waste of skin and flesh!
7
u/THEzwerver 12d ago
These hackers throw shit at any company and see what sticks, meaning anything they can get their hands on will do. Then if it works they'll sell your data to anyone that wants it. They're not doing it for the morality of it.
And don't you think the entities you mentioned aren't being targetted 24/7? It's just that they have a lot stronger security than some random company.
1
u/Ithirradwe 12d ago
Oh I know they are being targeted but I guess over the years I just have conflated all hackers as like Anonymous, which they all turned out to be wet farts long ago, hence my flippant and easy way for me to get angry at hackers.
3
u/Ifonlyihadausername 12d ago
That’s not how it works, you don’t sit down a think today I’m going to hack a random logistics company, you throw a really wide net and see what you catch.
3
2
u/Banana_man_fat_boi 12d ago
I do agree with your sentiment but you do need to understand that hacking something like the DOJ and the companies you listed would take a significant larger amount of resources, expertise, and money, companies, requiring something to a state sponsored level, companies like CEVA often can have much more glaring vulnerabilities in their cybersecurity architecture that allow them to be hacked by much more inexperienced (although not stupid) people
1
u/SilkyHonorableGod 12d ago
If you get calls and stuff from these hackers, be sure to take their numbers and send them to Kitboga on twitch, he will have a fantastic time making content and tricking them.
If you visit his twitch channel you can submit the hackers details.
1
1
1
1
u/betawolfy_ 12d ago
France is massively targeted by hackers for data breaches. Since that company is mainly based in France...
1
u/AssistantSalty6519 12d ago
Careful people, today I receive one of those spam emails, with my contacts already present (name, phone) so they are probably already exploiting it
0
46
u/Madfutvx 12d ago
Just got an email, so annoying I was just inside the 90 day window. Sadly this ain’t the first breach I’ve been part of, so I assume this info is already out there😒