Overview

• Valve has confirmed that the alleged leak of 89 million user records was not a breach of Steam systems and involved only historic SMS logs.
• The leaked data consisted of expired one-time authentication codes and phone numbers, which cannot be used to access Steam accounts or personal information.
• Twilio, initially speculated to be involved, denied any breach, and Valve clarified it does not use Twilio for authentication services.
• Valve is continuing to investigate the origin of the leak, which may stem from unencrypted SMS messages routed through third-party providers.
• Users are advised to enable the Steam Mobile Authenticator for enhanced security, though Valve has stated there is no need to change passwords or phone numbers.