Strong, randomly generated passwords keep being cracked

[Ryno]

Since 2017, I've gotten emails of attempts to login to my account with correct username and password every couple months from countries including Taiwan, Vietnam, Colombia, Russia, and France. No attempt has ever successfully gotten in because I have Steam Guard set up, but this is still worrying. Every time this happens, I change my email and Steam account to a new password using a password manager (LastPass) and I've even changed my LastPass password several times. Each time I deauthorize all logged-in devices, and I run routine and thorough malware and virus scans on all my devices, which have never had a detected keylogger.

The reason this is very odd is that my passwords are all very strong (30 characters, mixed case with special characters, and totally randomly generated). I highly doubt that these passwords are being broken by brute force, or through compromises to my other accounts (my LastPass and email access logs are clean). So what's the deal? How do my passwords keep getting broken?

[Iceira]

Still dont forget talk with own ISP, just to be sure, we have no clue what happend on its way into them, do note i did not say its them or anything about it, but you know very well how hard it is to best guess a strong security password, and this should get you more help from a ISP. any password length with 8+ letters and nr is seen as impossible to guess on.

and im sure they will say same thing, until you tell them happend and keep happend, and that why you talk with them to avoid re-routed traffic or other have access to it.

[Muppet among Puppets]

Do you use steam app or email guard?

[Ryno]

This is solved. Someone had created a second Steam Account under my email address (who knew a single email address could be associated with multiple accounts?) in 2010 that had a very weak password. The account has 0 friends and 0 games. No idea who made it or why, considering my actual steam account is much older.

[Dr.Shadowds 🐉]

Ryno eredeti hozzászólása:

This is solved. Someone had created a second Steam Account under my email address (who knew a single email address could be associated with multiple accounts?) in 2010 that had a very weak password. The account has 0 friends and 0 games. No idea who made it or why, considering my actual steam account is much older.

Yes you can have multiple accounts with same email, that why when get messages from Steam you know which account it is because it say dear "your account login name" not dear "your email, or display name".

Some people can forget they made smurf accounts, or if someone really did use your email making a new account, this actually wouldn't achieve much of anything really because there no way to collect info from end user, unless end user input their private info on the account, like name, and address, or even dumber saving credit card on it, loading the wallet up, buying games on it, loading it up with trade items, or etc... But this method not very effective to scamming end users as too many flaws in this method really.