My account got hacked

[76561198216262123]

Hey. So 2 days ago I tried to login to my steam account but it was saying that the password was wrong. Tried to recover but it was saying it had a different email so basically, I got hacked. I'm gonna be honest I think they hacked my email first and then my steam account, because they also changed info in my other gamming platforms. Tried to contact steam support but it's been 2 days without reply. I think they basically hacked my account by recovering with my old email because I saw the folders and there was a lot of emails I did not send and things about mtp and smtp or something like that. I already gave all the info to steam support, like cred card info, address, PayPal info, my emails, and screenshots but still no answer. I've been checking my old emails and I'm still getting people from China, Australia, America, Korea, etc trying to sync to my account but without success because I changed password and activated 2 factor authentication. I can provide all the info about my account. Please someone help.

[Brimzel]

Not sure about email hack... they most likely got access through a data leak. Regardless, if you already contacted Steam Support and they didn't reply yet, you're gonna have to keep waiting until they get to your ticket. Support does not ignore tickets, but yours may go behind in the queue if you're spamming them though.

[76561198216262123]

Originally posted by Honeypot Trap:

Not sure about email hack... they most likely got access through a data leak. Regardless, if you already contacted Steam Support and they didn't reply yet, you're gonna have to keep waiting until they get to your ticket. Support does not ignore tickets, but yours may go behind in the queue if you're spamming them though.

First of all ty for replying. And Ive been looking on the internet about email hacking and yea there's a lot of people that actually got hacked in outlook, by pop3, mtp, etc. I don't understand about those methods. So probably it was that way.

[Brimzel]

Originally posted by Tenkiuri:

First of all ty for replying. And Ive been looking on the internet about email hacking and yea there's a lot of people that actually got hacked in outlook, by pop3, mtp, etc. I don't understand about those methods. So probably it was that way.

Could be. Problem is that people usually confuse data leaks with straight hacking. You can check if your email has been compromised in a breach here:

https://haveibeenpwned.com

Due to the COVID situation, average wait times will be longer than usual. I don't know HOW long though, maybe another soul will arrive with a more concrete answer. If you actually sent the ticket...:

https://help.steampowered.com/en/wizard/HelpRequests

... then I'm afraid waiting further is your only option...

[76561198216262123]

Originally posted by Honeypot Trap:

Originally posted by Tenkiuri:

First of all ty for replying. And Ive been looking on the internet about email hacking and yea there's a lot of people that actually got hacked in outlook, by pop3, mtp, etc. I don't understand about those methods. So probably it was that way.

Could be. Problem is that people usually confuse data leaks with straight hacking. You can check if your email has been compromised in a breach here:

{LINK REMOVED}https://haveibeenpwned.com

Due to the COVID situation, average wait times will be longer than usual. I don't know HOW long though, maybe another soul will arrive with a more concrete answer. If you actually sent the ticket...:

https://help.steampowered.com/en/wizard/HelpRequests

... then I'm afraid waiting further is your only option... :DoctorK:

So I did put my email and it says this:

Oh no — pwned!
Pwned on 9 breached sites and found no pastes (subscribe to search sensitive breaches)

:/

[Brimzel]

Well, join the club, I have been pwned years ago. You can check further down on the page to see breaches you were pwned in.

[76561198216262123]

Originally posted by Honeypot Trap:

Well, join the club, I have been pwned years ago. You can check further down on the page to see breaches you were pwned in.

Weird I don't remember using these sites. But ty for your help I will wait for steam support to reply then.

[Wolverine]

Well, as posted by others, here's what you should do, start with securing your PC:
scan for malware https://www.malwarebytes.com/

when you get your Steam account back, change your password on a then hopefully clean PC,
deauthorize all devices https://store.steampowered.com/twofactor/manage
revoke any api key https://steamcommunity.com/dev/apikey
generate new back up codes https://store.steampowered.com/twofactor/manage

i'd also suggest to think really hard about getting some security software for your PC, and it can't hurt to get some privacy/security addons for your internet browser too, and keep those and your OS up to date.

[Xaelath]

Originally posted by Honeypot Trap:

Originally posted by Tenkiuri:

First of all ty for replying. And Ive been looking on the internet about email hacking and yea there's a lot of people that actually got hacked in outlook, by pop3, mtp, etc. I don't understand about those methods. So probably it was that way.

Could be. Problem is that people usually confuse data leaks with straight hacking. You can check if your email has been compromised in a breach here:

https://haveibeenpwned.com

Due to the COVID situation, average wait times will be longer than usual. I don't know HOW long though, maybe another soul will arrive with a more concrete answer. If you actually sent the ticket...:

https://help.steampowered.com/en/wizard/HelpRequests

... then I'm afraid waiting further is your only option... :DoctorK:

Is this havebeenpwned even legit lol, It said 6 but i have never went to any of them and I have been really careful with my 2 decades old email + multiple secured password and recovery

Originally posted by Tenkiuri:

Originally posted by Honeypot Trap:

Well, join the club, I have been pwned years ago. You can check further down on the page to see breaches you were pwned in.

Weird I don't remember using these sites. But ty for your help I will wait for steam support to reply then.

Doubt it can be trusted, it's likely you got breached via malware like i was back then.
Thankfully hacker doesn't get through my email because it requires phone authentication


Edit : Do not forget that people still can take your email name just to register but not used

[Brimzel]

Originally posted by Xaelath:

Is this havebeenpwned even legit lol, It said 6 but i have never went to any of them and I have been really careful with my 2 decades old email + multiple secured password and recovery

Not sure, to be honest. It shows all my emails as okay, besides the one that suffered a data leak, so it works for me, I suppose.

EDIT: I saw it being suggested in these forums sometimes, so I just used it for fun. Maybe someone could help us in confirming or denying whether it's legit or not.

EDIT2: From what I have been gathering around the internet, the site is VERY legit.

"Troy Hunt is an Australian web security expert known for public education and outreach on security topics. He created Have I Been Pwned?, a data breach search website that allows non-technical users to see if their personal information has been compromised."

I feel terrible as a future security expert for not knowing about it...

[76561198216262123]

Originally posted by Wolverine:

Well, as posted by others, here's what you should do, start with securing your PC:
scan for malware {LINK REMOVED}https://www.malwarebytes.com/

when you get your Steam account back, change your password on a then hopefully clean PC,
deauthorize all devices https://store.steampowered.com/twofactor/manage
revoke any api key https://steamcommunity.com/dev/apikey
generate new back up codes https://store.steampowered.com/twofactor/manage

i'd also suggest to think really hard about getting some security software for your PC, and it can't hurt to get some privacy/security addons for your internet browser too, and keep those and your OS up to date.

First of all ty for your answer. I already hard reset my pc I usually use avg anti-virus.
I'm just waiting for steam support to reply to me to know what will happen, I'm really scared to lose my account to be honest, I already invested some money and some hours in cs and rust lol and currently I'm not working so I can't afford to buy the games again lol.
I don't know what is an api key but I will surely check all the things.
Ty for your help

[76561198216262123]

Originally posted by Xaelath:

Originally posted by Honeypot Trap:

Could be. Problem is that people usually confuse data leaks with straight hacking. You can check if your email has been compromised in a breach here:

{LINK REMOVED}https://haveibeenpwned.com

Due to the COVID situation, average wait times will be longer than usual. I don't know HOW long though, maybe another soul will arrive with a more concrete answer. If you actually sent the ticket...:

https://help.steampowered.com/en/wizard/HelpRequests

... then I'm afraid waiting further is your only option... :DoctorK:

Is this havebeenpwned even legit lol, It said 6 but i have never went to any of them and I have been really careful with my 2 decades old email + multiple secured password and recovery

Originally posted by Tenkiuri:

Weird I don't remember using these sites. But ty for your help I will wait for steam support to reply then.

Doubt it can be trusted, it's likely you got breached via malware like i was back then.
Thankfully hacker doesn't get through my email because it requires phone authentication


Edit : Do not forget that people still can take your email name just to register but not used

Hey. I think it was via my old email. The thing is they were smart, they recovered account, changed the email I was using for another and replaced the account in that email with a similar account lol. Fu***NG hackers.

[Brimzel]

Originally posted by Tenkiuri:

I'm really scared to lose my account to be honest, I already invested some money and some hours in cs and rust lol and currently I'm not working so I can't afford to buy the games again lol.

Don't worry, as long as you can provide proof of ownership, Support will recover it for you.

Originally posted by Tenkiuri:

I don't know what is an api key but I will surely check all the things.

When you recover your account and get to it, it'll show whether or not you have a key. If it gives you an option to revoke one, then do it. If it asks you to input a key, then just leave it alone.

[76561198216262123]

Originally posted by Honeypot Trap:

Originally posted by Tenkiuri:

I'm really scared to lose my account to be honest, I already invested some money and some hours in cs and rust lol and currently I'm not working so I can't afford to buy the games again lol.

Don't worry, as long as you can provide proof of ownership, Support will recover it for you.

Originally posted by Tenkiuri:

I don't know what is an api key but I will surely check all the things.

When you recover your account and get to it, it'll show whether or not you have a key. If it gives you an option to revoke one, then do it. If it asks you to input a key, then just leave it alone.

I hope so.
I will wait for them to reply.
Ty so much for the help.

[Brimzel]

Sorry for late reply, but wanted to note that haveibeenpwned was created by legendary security expert Troy Hunt, so it's safe to say it's legit.

Originally posted by Tenkiuri:

I hope so.
I will wait for them to reply.
Ty so much for the help.

Happy to serve. I recovered my account once, I'm sure things will go smoothly since you seem to have way more proof than I had back then.

Happy gaming!

[Troy Vietnam [road to 50k]]

if u have all the receipets or proof u can easily get it back via steam support