IT Security Stories to Watch: Was Steam User Data Leaked?

Valve, the company behind gaming platform Steam, said a recent caching issue allowed Steam users to see pages that included other users’ account information.

And as a result, Valve tops this week’s list of IT security newsmakers to watch, followed by Hyatt Hotels (H), Livestream and the Digital Citizens Alliance (DCA).

What can managed service providers (MSPs) and their customers learn from these IT security newsmakers? Check out this week’s edition of IT security stories to watch to find out:

1. Valve releases details about Steam caching issue

A caching issue caused Steam users to see other users’ account information on the Steam Store on Christmas.

SteamDB pointed out the issue may have put user account information such as email addresses and billing addresses at risk.

However, Valve noted Steam was not hacked and the issue has been fully resolved.

“As a result of a configuration change earlier today, a caching issue allowed some users to randomly see pages generated for other users for a period of less than an hour. This issue has since been resolved,” Valve said in a prepared statement. “We believe no unauthorized actions were allowed on accounts beyond the viewing of cached page information and no additional action is required by users.”

2. Hyatt identifies malware

Hyatt said it has discovered malware on computers that operate its payment processing systems.

A Hyatt spokesperson told Reuters the malware was discovered on Nov. 30 but the company was uncertain if payment card numbers were stolen, how long the network was infected or how many of the chain’s hotels were affected.

Hyatt has launched an investigation into the incident. 

3. Was Livestream breached?

Live video streaming platform Livestream has notified users that an unauthorized user may have accessed its customer accounts database. 

ZDNet reported the database included customer usernames, addresses and other personal information.

“While we are still investigating the full scope of the incident, it is possible that some of your account information may have been accessed,” Livestream wrote in an email to users. “If you used the same passwords for other accounts, we recommend changing your passwords for those accounts as well.”

4. DCA: One in three piracy websites contain malware

A new report from the DCA and cybersecurity firm RiskIQ revealed one-third of piracy websites contain malware.

The report also indicated the majority of malware is delivered via user-initiated downloads, and the malware industry is worth approximately $70 million.

“Malware means more than just a slow computer. An infected computer exposes everyone who uses it — children, spouses or roommates — to the risks of being victimized by any of a variety of criminal schemes,” DCA and RiskIQ wrote in the report. 

What are your thoughts on this week’s IT security stories to watch? Share your thoughts about this story in the Comments section below, via Twitter @dkobialka or email me at [email protected].