You may by now have heard that “Steam” was broken into a week and a half ago and “consumer” credit card details stolen. As the quote marks suggest the breach has been played up by those behind it, whose exaggerations have been somewhat naively passed on by a number of big sites today. In actuality: * Steam was not compromised, only a regular Valve file server. In fact according to Valve it was a “third-party site” — though what sort of third party stores the sum in their corporate account I don’t know. * Consumer credit card information has not been stolen. The numbers in danger are all held by cybercafe owners, who have recurring subscriptions to their Steam games and have probably all long been informed. Consumer data are only stored in enough detail to fight mass fraud, not make purchases, and weren’t compromised anyway. Paying at a cafe does not put your card at risk. All this will certainly make sure that when consumer subscriptions do arrive (as they will with Pirates of the Burning Sea) they’ll be properly secured, but given that it isn’t really a Steam issue there’s not much more for me to talk about. If you see anyone worrying, send them here! Update: Valve’s statement, from 1UP: There has been no security breach of Steam. The alleged hacker gained access to a third-party site that Valve uses to manage the commercial partners in its Cyber Café program. This Cyber Café billing system is not connected to Steam. We are working with law enforcement agencies on this matter, and encourage anyone with more information to e-mail us at firstname.lastname@example.org.Source This link was given to me by Uber-Zeo.