Jump to content

What the hell is up with Steam? I see somebody's account in my store.


iPlayer

Recommended Posts

They are not my accounts!

 

Whenever I click on my funds amount in steam client (near to your login), I get teleported to somebody else's account info, containing their account information, including their last credit card numbers, phone number and their full e-mail address!

 

My friend is experiencing the same issue right now.

Link to comment
Share on other sites

Posted · Hidden by polar, December 25, 2015 - No reason given
Hidden by polar, December 25, 2015 - No reason given

Here's another acc

http://imgur.com/5gE9dtn

 

Languages are changing too.

 

Click on your login (upper right, NOT your nickname!), then click "Account info/About this account"

Link to comment

Yeah, steam is shitting itself lately. Nobody has any idea why yet. I'm guessing it has something to do with the amount of steam card codes entering the system, but that's just a guess.

 

Bottom line, don't try to do anything involving money or markets until you can consistently access your own account.

Link to comment
Share on other sites

Posted · Hidden by polar, December 25, 2015 - No reason given
Hidden by polar, December 25, 2015 - No reason given

Wait so they can basically change all of your account/payment/security info? Welp

No, I guess not.

 

This is the furthest I got in somebody's else account

pP6PdhY.png

 

Whenever you actually try to do something, you get an error or you suddenly start operating your real account.

Link to comment

I don't mind this too much currently as i don't plan to purchase stuff, the only thing i'm worried is if i have to change my account details because of this.

Link to comment
Share on other sites

Posted · Hidden by polar, December 25, 2015 - No reason given
Hidden by polar, December 25, 2015 - No reason given

You can also view their purchase histories / licenses.

 

T51j1sZ.png

Link to comment

 

By the way, this is not a security breach.

 

I see information like credit cards, e-mail, phone numbers and all their licenses, how's that not a security breach? It all at least falls under 'sensitive information'.

Link to comment
Share on other sites

I see information like credit cards, e-mail, phone numbers and all their licenses, how's that not a security breach? It all at least falls under 'sensitive information'.

Thankfully only the last 2 digits of credit card and last 4 digits of phone numbers.

 

I'm happy that I use Steam mobile now.

Link to comment
Share on other sites

Thankfully only the last 2 digits of credit card and last 4 digits of phone numbers.

 

I'm happy that I use Steam mobile now.

 

Yeah, same here, I got through all the security measures in case of times like these.

Link to comment
Share on other sites

So, from what I gathered, SDB reported it as a cache error. My guess as to what happened is that either some servers went down because of the load and were replaced with new/developmental servers, causing the cache to go mad, or an engineer who was working at the time saw the massive load coming in and tried to re-cache the servers too aggressively. 

 

either way, I feel bad for the developers at valve, spending their christmas dealing with this.

Link to comment
Share on other sites

Wait so they can basically change all of your account/payment/security info? Welp

 

welp i wanted to test this so i tried to remove a free to play game that he never played from hes account and it said error, so i think they cant change your info

Link to comment
Share on other sites

Thankfully only the last 2 digits of credit card and last 4 digits of phone numbers.

 

I'm happy that I use Steam mobile now.

I can't give you the link unfortunately, but there was an successful attempt at hacking using this way:

1. Phone support of site A, say, Amazon, requires you to give them last 4 digits of your phone number in order to reset your password.

2. You go to gmail of the same person, click "Forgotten your password", then it shows you a message like "A confirmation has been sent to your phone (***) ****-****-12345"

3. You give site A the combination they want - "2345".

 

Original article involved much more sites, one giving you last 4 phone digits, another one giving you first 5 phone digits etc, plus a lot of social engineering aimed at tech support.

Link to comment
Share on other sites

I can't give you the link unfortunately, but there was an successful attempt at hacking using this way:

1. Phone support of site A, say, Amazon, requires you to give them last 4 digits of your phone number in order to reset your password.

2. You go to gmail of the same person, click "Forgotten your password", then it shows you a message like "A confirmation has been sent to your phone (***) ****-****-12345"

3. You give site A the combination they want - "2345".

 

Original article involved much more sites, one giving you last 4 phone digits, another one giving you first 5 phone digits etc, plus a lot of social engineering aimed at tech support.

 

But...Don't you need their gmail password to access their emails...?

And if you have that much, why not just use it on their steam account to start with? Most people use the same passwords everywhere anyway. And if you found one of the few people who don't do that you could just move on to the next and try again there.

Link to comment
Share on other sites

Since there is none of my personal information saved on steam, I'm fine and expecting some free games from steam tomorrow.

 

EDIT: Oh wait, my phone.

Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...