Valve has officially debunked alarming reports that over 89 million Steam accounts were at risk due to a data breach involving leaked SMS messages used for two-factor authentication (2FA). While the company confirmed it would continue investigating the situation, it assured users that no Steam account information was involved in the leak.
The security scare originated from claims that an SMS-based service used for 2FA had been compromised, possibly exposing millions of Steam accounts. However, Valve was quick to investigate and responded publicly to set the record straight.
“We reviewed the leaked data sample and confirmed it did not include any Steam account information,” Valve stated. “The leaked SMS messages were outdated and not linked to any active Steam credentials or user data.”
What Was in the Leak?
According to Valve’s official statement on Steam’s News Hub, the leak stemmed from old text messages that contained two-factor authentication codes. These 2FA codes, however, were only valid for 15 minutes and were tied specifically to the phone numbers that initially requested them. Valve emphasized that:
-
The leaked numbers were not associated with Steam user accounts.
-
No personal data or account credentials were compromised.
-
The leak was external and unrelated to Steam’s internal systems.
Steam’s Commitment to User Security
As the world’s leading PC gaming distribution platform since 2003, Steam supports millions of daily logins. Valve has maintained a strong record of user trust through consistent updates, feature rollouts, and proactive communication. While platforms like the Epic Games Store, GOG Galaxy, and Xbox for Windows continue to grow, Steam remains the top destination for PC gamers worldwide.
In recent years, Valve has taken additional steps to enhance user privacy and experience, including:
-
Implementing more robust two-factor authentication options
-
Allowing users to hide games from public view
-
Blocking exploitative in-game advertising models
Though the rumors suggested a massive breach, Valve’s investigation confirmed that Steam’s infrastructure and user data were not compromised. Users are still encouraged to keep their security settings updated and to be cautious of phishing attempts and third-party services claiming to access Steam data.