Massive Steam data leak, over 89 million Steam accounts were compromised and their details were up for sale on the dark web.
Steam Data Leak 2025: What You Need to Know
Estimated reading time: 3 minutes
In early May 2025, the gaming world buzzed with news of a massive Steam data leak. Reports claimed that over 89 million Steam accounts were compromised and their details were up for sale on the dark web. The initial panic was understandable-after all, Steam is the backbone of PC gaming for millions worldwide. However, as the dust settled, the technical details revealed a different story.
Technical Breakdown of STEAM Data Leak 2025
Third-Party Vendor, Not Steam
The breach did not originate from Steam’s own infrastructure. Instead, the leak involved a third-party communications vendor. This vendor handled SMS-based two-factor authentication (2FA) codes for Steam users. The leaked dataset reportedly included:
- Phone numbers
- One-time 2FA codes sent via SMS
- Metadata about message delivery
Crucially, no Steam account passwords, payment information, or personal data were exposed. Valve, Steam’s parent company, confirmed that their systems remained secure. The leak consisted of older SMS messages with one-time codes, valid for only 15 minutes. These codes alone are useless without access to the corresponding accounts.
STEAM Data Leak 2025: How did it Happen?
SMS messages, by design, are unencrypted in transit. They pass through multiple providers before reaching users’ phones. This architecture makes SMS-based 2FA less secure than app-based authenticators. The hacker, known as Machine1337, claimed backend access to a vendor’s dashboard or API, not Steam’s own servers. This allowed them to collect logs of SMS messages, including the codes and phone numbers, but not direct account credentials.
Valve’s Response Advice
Consequently, Valve quickly responded, stating:
We have examined the leak sample and have determined this was NOT a breach of Steam systems. The leak consisted of older text messages that included one-time codes that were only valid for 15-minute time frames and the phone numbers they were sent to.
Valve indeed reassured users there was no need to change passwords or phone numbers. However, they recommended enabling the Steam Mobile Authenticator for stronger protection, as SMS-based 2FA is inherently riskier.
What Should Gamers Do Now?
- Enable app-based 2FA (Steam Mobile Authenticator) for better security.
- Stay alert for phishing attempts using leaked phone numbers.
- Regularly monitor account activity.
STEAM Data Leak 2025: Final Thoughts
The Steam data leak 2025 is a cautionary tale about third-party risks and also the limits of SMS-based security. While the core Steam systems stayed safe, the incident highlights why techies and gamers should always opt for app-based authentication.
Additionally, to stay updated with the latest developments in STEM research, visit ENTECH Online. Basically, this is our digital magazine for science, technology, engineering, and mathematics. Further, at ENTECH Online, you’ll find a wealth of information.
Reference
- Colp, T. (2025, May 14). False alarm: Valve confirms that nobody hacked into over 89M Steam accounts and that your passwords are safe. PC Gamer. https://www.pcgamer.com/software/platforms/false-alarm-valve-confirms-that-nobody-hacked-into-over-89m-steam-accounts-and-that-your-passwords-are-safe/
- Author
- Latest Posts
Driven by passion for leveraging technology to “Build things worth Building”. I am a Software Engineer with a background in Computer Engineering from Pune University.
Having done multiple internships and volunteering programs throughout my engineering days, I have been deeply involved in the end-to-end development lifecycle, from conceptualization and design to implementation and deployment. I have been a part and also led teams at times to national/international level hackathons. Some of those include Peerlist GenAI Hackathon and NASA Space App challenges.
My educational foundation in Computer Engineering paired with the real world hands-on experience through various ventures provided me with strong knowledge of fundamental technologies.
Continuously seeking opportunities to learn and contribute. I am eager to connect with fellow innovators and contribute to impactful projects.