89 Million Steam Accounts Breached: Twilio Denies Associated 2FA Leak
A massive data breach allegedly affecting 89 million Steam accounts has sent shockwaves through the gaming community, prompting security experts to urge users to change their passwords immediately. Simultaneously, Twilio has denied claims linking the breach to leaked Steam two-factor authentication (2FA) codes.
Alleged Data Breach on Steam
Reports emerged on May 14, 2025, that sensitive user information from as many as 89 million Steam accounts might have been compromised. The breach appears to have exposed user credentials, including emailaddresses and hashed passwords.
While no evidence has yet indicated that financial data was affected, security professionals emphasize that compromised account information can lead to various cyber threats, from phishing scams to unauthorized access.
A spokesperson for a cybersecurity firm explained, “When large-scale breaches occur, users must change their account passwords immediately. This minimizes the risk of further exploitation, especially if users have reused passwords across multiple sites.”
Steam, operated by Valve Corporation, has confirmed that its systems were not breached, clarifying that the recent leak involved older, unencrypted SMS messages and did not compromise account credentials, personal data, or payment information.
Valve is continuing to investigate the source of the leak while urging users to enable Steam Mobile Authenticator for enhanced security.
Twilio Denies Leak of Steam 2FA Codes
In a related development, Twilio has issued a denial regarding reports of alleged leakage of Steam 2FA codes. Several online forums circulated claims that unauthorized 2FA data was part of the breach, potentially exposing an additional layer of security for Steam users.
A Twilio representative stated, “We have thoroughly investigated these allegations and categorically deny any breach involving our systems that would affect Steam’s two-factor authentication codes. Our records and security protocols remain intact.”
This official denial from Twilio comes at a time when users are scrambling to secure their gaming accounts, adding confusion to an already complex situation.
What Users Should Do Now
Cybersecurity experts emphasize the importance of immediate action in light of the breach. Here are several key recommendations for Steam users:
Change Your Password: If you haven't already, update your Steam password immediately. Make sure to use a strong, unique combination of letters, numbers, and symbols.
Enable Two-Factor Authentication: Although Twilio has denied any breach involving 2FA codes, users should ensure that 2FA is enabled on their Steam accounts for an added layer of security.
Monitor Account Activity: Keep an eye on your account for any suspicious activities. If you notice any unauthorized access, report it to Steam Support immediately.
Be Wary of Phishing: Beware of any email or messages claiming to be from Steam or other gaming platforms asking for personal information or login credentials.
Conclusion
The alleged breach affecting 89 million Steam accounts serves as a stark reminder of the ongoing cyber threats that large online platforms face. With millions at risk, users are advised to take immediate preventive measures to secure their accounts.
Meanwhile, Twilio’s firm denial of any involvement in a 2FA breach adds complexity to the story, urging the community to remain vigilant.
How are you securing your Steam account in response to this breach? Share your thoughts in the comments and stay tuned for more updates on this developing story.