Steam suffers major account security issue.
So I’m home from Christmas dinner, let’s see what’s been happening in the world of Steam while I was away… Oh dear.
It looks like Steam had a major issue Christmas Day, with reports that a caching issue caused Steam users to see account details of accounts that were not their own. While credit card details (other then the last four digits) were hidden, in accordance with US law, that is a major issue for Steam.
Steam released a statement on the issue late yesterday evening:
Steam is back up and running without any known issues. As a result of a configuration change earlier today, a caching issue allowed some users to randomly see pages generated for other users for a period of less than an hour. This issue has since been resolved. We believe no unauthorized actions were allowed on accounts beyond the viewing of cached page information and no additional action is required by users.
We’ll see if accounts start recording fraudulent charges. Not a good day for this to happen (then again, there is no good days for this to happen.)