Steam/Valve is currently in violation of Washington state law.

[(J)]

http://privacylaw.proskauer.com/2015/04/articles/data-privacy-laws/washington-state-amends-breach-notification-law-to-expand-notification-requirements/

http://apps.leg.wa.gov/rcw/default.aspx?cite=19.255.010

In short. They have not made any attempts to notfiy us as a whole or individually. Which they are required to do. This is one of those cases that not communicating, is going to land them in hot water.

[Storm]

The fact that they didn't take down the servers as soon as they were notified of the problem is probably a breach of law too.

[RalphRoberts]

I hope Valve burns for this, maybe companies will finally start protecting private data.

[FetterHobbit]

You guys realize that valve is already working on this?

[(J)]

Publicado originalmente por FetterHobbit:

You guys realize that valve is already working on this?

Perhaps, but the law requires that they notify everyone.

[Clueless]

And more, in the UK, its a very serious Data Protection breach

[Serlo]

It's pretty incompetant this is still happening and the account servers haven't been brought down.

[LukewarmBong]

Yeah the lack of information about it from Valve is concerning... Also they should be shutting the site down to prevent personal info from getting into strangers hands. So far this is the only thing I've found about them even just acknowledging it:

https://twitter.com/SteamDB/status/680490823226671104

[Evileye]

steamdb is not part of steam

[FetterHobbit]

You can't really expect them to notifiy everyone in just a couple of minutes, nobody knows at the moment what is happening so you don't need to swing the law club :D

[404]

Publicado originalmente por FetterHobbit:

You guys realize that valve is already working on this?

And who told you this?
They said NOTHING so far and people's info keeps getting leaked as we speak.

[LukewarmBong]

Publicado originalmente por Evileye:

steamdb is not part of steam

What a misleading name!!! In that case I can't find anything about it from anywhere officially by valve

[Meh...]

Do these morons that work for valve ever heard of TURN OFF THE ♥♥♥♥♥♥ SERVER?

[LukewarmBong]

Greedy bastards probably don't want to shut down their sales on christmas day.

Edit: They shut it down not even 20seconds after posting this lol. That timing

[LukewarmBong]

But yeah, says they have up to 45 days from the day of the breach to let us know

"The new law requires consumer notification in the most expedient time possible and without unreasonable delay, and no more than 45 days after the breach was discovered"

http://steamcommunity.com/discussions/forum/0 - this got them out of hot water :/

I feel like 45 days is an unreasonable amount of time to allow companies to delay with..... I'd think even a week would be too long for something serious like private info/security. I'd be piiiiiissed if valve came out with a statement finally 44 days later and I couldn't do ♥♥♥♥♥♥♥♥♥ about it

[Satoru]

Here's a tip

READ THE DAMN LAW FIRST

I'm noting there isn't a 'you must notify users within 0.01 seconds of something happening'