Particle.news

Download on the App Store

Steam SMS 2FA Logs Allegedly Leaked on Dark Web, Valve Denies Breach

89 million SMS authentication logs, lacking sensitive credentials, are reportedly for sale, prompting security warnings about SMS-based 2FA vulnerabilities.

Image
Image
Auf dem Bild ist ein Smartphone zu sehen, das das Steam-Logo anzeigt.
Image

Overview

  • A Dark Web seller claims to offer 89 million Steam SMS two-factor authentication logs for $5,000, containing phone numbers and expired codes but no login credentials.
  • Valve and Twilio have officially denied any breaches or partnerships related to the alleged dataset, and its authenticity remains unverified.
  • Security experts emphasize the vulnerabilities of SMS-based two-factor authentication and recommend switching to app-based methods like Steam Guard for stronger protection.
  • Users are advised to update their Steam passwords, enable app-based 2FA, and review connected devices for unauthorized access as precautionary measures.
  • The origin of the dataset is unclear, with speculation pointing to a potential leak from a third-party SMS provider rather than a direct breach of Steam systems.