Valve

Disclosed Nov 11, 2011Confirmed

Hackers access Steam user database holding encrypted card data

Valve found that attackers who breached the Steam forums used that access to reach a database with user and encrypted credit card information for the service, which had about 35 million users; Valve said it had no evidence of card misuse.

What is known

People affected	Not stated in the sources we have
Disclosed	Nov 11, 2011
Attack	Hacking
Data exposed	NamesPayment cardsCredentials and tokens
Sector	Gaming · US
Status	Confirmed

Sources

Official noticeoag.ca.gov

California Attorney General breach notice: Valve

Newsbbc.co.uk

Valve's online game service Steam hit by hackers

Notices filed

TotalNov 11, 2011

ResearchCount not stated

Residents of CAFeb 8, 2012

California AGCount not stated

Other breaches at Valve

Valve warns European Steam hardware buyers of data theft at CEVAVendor breach exposed names, addresses, phone numbers and emails.Vendor breachGamingUSUnverifiedAug 10

History of this record

sector2026-09-25

other to gamingby seedSource

attack2026-09-25

unknown to hackingby seedSource

data_types2026-09-25

[] to ["names","payment-card","credentials"]by seedSource

disclosed2026-09-25

2012-02-08 to 2011-11-11by seedSource

summary2026-09-25

empty to Valve found that attackers who breached the Steam forums used that access to reach a database with user and encrypted credit card information for the service, which had about 35 million users; Valve said it had no evidence of card misuse.by seedSource

title2026-09-25

empty to Hackers access Steam user database holding encrypted card databy seedSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Valve