Overview

• Valve has confirmed that the alleged leak of 89 million Steam user records did not involve a breach of its systems.
• The leaked data consisted of outdated SMS two-factor authentication codes and phone numbers, which cannot be used to compromise accounts.
• Twilio, initially speculated as the source of the leak, has denied any involvement, and Valve clarified it does not use Twilio for its services.
• Users are not required to change their passwords or phone numbers but are advised to enable the Steam Mobile Authenticator for added security.
• Valve is actively investigating the origin of the leak, emphasizing the risks of unencrypted SMS messages in transit through multiple providers.