Information has appeared online about an alleged data leak affecting about 89 million Steam user accounts. According to reports, this data is being put up for sale on shady Internet sites at a price of about $5,000.

A user under the nickname Machine1337, also known as EnergyWeaponsUser, posted an announcement on the shadow market about the sale of a database with more than 89 million Steam user accounts with one-time access codes. The hacker is asking for $5,000 dollars for the database.

• If this is true, then the buyer will not only gain access to someone's account that does not use two-factor authentication or change the password, but will also be able to use other data to send convincing phishing messages to people they cannot hack.
• At the moment, Valve is supposedly conducting an internal investigation to clarify all the circumstances of the incident and confirm the leak of users' personal data.
  

  ---

Initially, it was assumed that the leak occurred directly from the Steam servers. However, according to recent reports, the problem may not be related to direct hacking of Steam servers, but to hacking of one of the third-party services that Steam cooperates with. This indicates a possible attack through the supply chain, when a less secure partner of the company becomes the target.