Steam Personal Info Disclosure 25th Dec 2015

[Pestilence]

I love the way people are saying it "took too long" and where saying it within minutes of it happening.

From what I can tell it took them under an hour to pull the systems from the first reports I've seen online (the first reddit comment seems to be from about 8pm uk time).
Which given the day it happened on, and the likely permissions to pull the system offline would probably be a reasonable time frame allowing for the fact that it has to be reported/noted, staff would likely have to eitther get multiple independent reports of see it themselves then make the decision to pull it.
I suspect the front line support staff don't get to decide to pull the servers offline, and the staff that do wouldn't necessarily be in to do it straight away (I bet a few Christmas meals got interrupted).

+1

Hell of a response for Christmas day.

Just sucks to be the guy who was just getting up, getting ready for breakfast in his PJs and Christmas jumper... when the mobile rang.

 

[Naff8000]

I visited Reddit, thought ww3 had begun then thought I'd better check here for clarification...

 

[Mynight]

I visited Reddit, thought ww3 had begun then thought I'd better check here for clarification...

Isn't Reddit always at defcon 6?

Wonder how much money they lost out on.

 

[russell664]

Reddit is certainly always on Defcon 6.

That place is a madhouse.

 

[neoboy]

Excuse me for being a pedant and unless I'm missing a reference here, isn't higher DEFCON level actually a good thing?

 

[Brizzles]

Excuse me for being a pedant and unless I'm missing a reference here, isn't higher DEFCON level actually a good thing?

Double pedant alert - DEFCON only goes to 5

 

[neoboy]

Double pedant alert - DEFCON only goes to 5

That was my confusion as well, surely 6 would be world peace!

 

[G-MAN2004]

hopefully the EU/ICO will fine them into bankruptcy for this!:

Amazing.

 

[hyperseven]

valve have the worst customer service in the world so dis gun be gud

In the world, really, care to share the source for this.

 

[MrMoonX]

In the world, really, care to share the source for this.

You've obviously never tried to contact steam support

Plus they have terms and conditions that aren't compatible with the law, they are about to get Rodgered by the EU over refunds anyway

 

[kitch9]

nothing to worry about

they just exposed everyones personal details and account history to randoms

hopefully the EU/ICO will fine them into bankruptcy for this!

Its taken them long enough to respond and they still haven't taken their servers down

Always the drama Queen

 

[kitch9]

Amazing.

He's a grade 1.

Ignore.

 

[Cosimo]

So many people steamed up....

 

[hyperseven]

You've obviously never tried to contact steam support

Plus they have terms and conditions that aren't compatible with the law, they are about to get Rodgered by the EU over refunds anyway

-never needed to.

-Still no source for, 'in the world', nonsense.

-'aren't compatible with the law', which court has deemed this so?

-'about to' is not have been.

-'Refunds', nah try again, it's about reselling digital media.

-EU, oh you mean France, and just some poxy consumer association, pity Germany tried the same and Valve won.

You really should check your facts.

 

[Duke]

Explanation of what happened - http://www.technobuffalo.com/2015/1...tter-WP&utm_medium=twitter&utm_source=twitter

 

[jon86]

Explanation of what happened - http://www.technobuffalo.com/2015/1...tter-WP&utm_medium=twitter&utm_source=twitter

valve should apologize and compensate those affected, having someone personal data (real full name, billing address) compromised is not something that can be taken light-heartedly. If they don't, someone should just prepare a class action lawsuit against valve

Quick! To the lawyers!

 

[Kronos]

http://www.kitguru.net/gaming/secur...nally-explains-steams-christmas-day-accident/

 

[Tefal]

A clinic recently received a fine of £350 for disclosing the HIV status of 950 patients.

The punishments for these types of breaches are pathetic.

they did no such thing, what happened was the email newsletter, for the HIV group got send out with everyone emails visible rather than hidden.

given anyone could be signed up to the newsletter (its not just for positive people, its for friends, family, partners of suffers etc) and it was just an email its hardly a massive breach.


its a bit like if the McMillan cancer newsletter accidentally did the same thing.

 

[Mynight]

Excuse me for being a pedant and unless I'm missing a reference here, isn't higher DEFCON level actually a good thing?

Oops. I thought higher was worse .

Should be higher means worse what happens if they need another level defcon 0?

 

[Brizzles]

Should be higher means worse what happens if they need another level defcon 0?

Looking out of your window and seeing giant mushroom clouds is defcon 0