Overview
- A Dark Web seller claims to offer 89 million Steam SMS two-factor authentication logs for $5,000, containing phone numbers and expired codes but no login credentials.
- Valve and Twilio have officially denied any breaches or partnerships related to the alleged dataset, and its authenticity remains unverified.
- Security experts emphasize the vulnerabilities of SMS-based two-factor authentication and recommend switching to app-based methods like Steam Guard for stronger protection.
- Users are advised to update their Steam passwords, enable app-based 2FA, and review connected devices for unauthorized access as precautionary measures.
- The origin of the dataset is unclear, with speculation pointing to a potential leak from a third-party SMS provider rather than a direct breach of Steam systems.