Attempt to login from unknown location

[punkanpun]

"The login attempt included your correct account name and password."
Problem is that my password is randomly generated 20 characters long. I have never used it to login from the web, only for steam application. My PC or password vault is not compromised. Otherwise, I would have much more problems than attempt to login to steam. And it would be easy to get security code (at least somebody would try to do that). E-mail also has two-factor authentification, so nobody even tried to login. How could this happen? Any suggestions on how to prevent this from happening ever again?

[cSg|mc-Hotsauce]

Make sure the info in the email is genuine and actually includes your account name. There are a ton of fakes.

[punkanpun]

User name is correct, but I have different login. I don't know which I supposed to see. Sender e-mail is correct and all of the links also contain correct domain name.
But if I open the recovery link, it shows my user name, not login name. Which is strange. Still, I don't know, maybe it's correct.

[JPMcMillen]

Originally posted by guilder13:

User name is correct, but I have different login. I don't know which I supposed to see. Sender e-mail is correct and all of the links also contain correct domain name.
But if I open the recovery link, it shows my user name, not login name. Which is strange. Still, I don't know, maybe it's correct.

If the email doesn't contain the correct LOGIN name, it's a phishing scam.

[punkanpun]

Phishing scam from the original steam email? Even if it is possible (which I'm not sure, but let's suppose that it is) it must also contain a malicious link, to enter correct login and password. But it only contains correct links, which I checked by side-by-side diff.