89 million Steam user records are leaked? V: Don’t panic. You don’t need to change your password?

May 15 2025

  According to foreign media BleepingComputer, recently a hacker sold about 89 million Steam user text messages records on the dark web for $5,000, including historical text message verification code (Steam Guard one-time login code) and corresponding mobile phone numbers.

  In response to this, Valve (V Club) quickly issued a statement confirming that the Steam platform system has not been compromised and that the user account security is not substantially threatened, so there is no need to change the password or phone number. However, V said it is still investigating the specific cause of the data breach and pointed out:

 "We are in-depth investigating the source of the leak. Since the SMS is not encrypted during transmission and needs to be routed by multiple service providers, this makes the tracking work even more complicated."

 V said that the leaked data only contains historical SMS verification codes and corresponding mobile phone numbers, but is not associated with Steam accounts, passwords, payment information or other personal data. In addition, these verification codes are valid for only 15 minutes, and any changes involving account email or password will be confirmed secondaryly via email or Steam security messages, so it will not pose a risk to the security of existing accounts.

Related App