I just wanted to help with the images. You are linking the web page that the image is on, but you need to link directly to the image if you want them to show here. You can right click the image and copy the image address. Also the description part here (where you wrote "Cat") is optional and can be left blank, unless you want them to say cat for some reason. Here are direct image links.
Comment has been collapsed.
Sorry for that, the Cat part is in Help/Comment Formatting, dindt undestand that wasnt part of the format
Comment has been collapsed.
This is really weird indeed. And kinda concerning.
They (Valve) said they themselves gave access to your account to someone else because they could "provide proof of ownership" but they ask very private information. So not only does someone had access to your account, they also know the last four numbers of your credit card, your address and phone number.
It looks like more than just a Steam account hack. Your information has been leaked somewhere. If it doesn't come from your PC, since you said you scanned it for malware (although I recommend doing it with multiple online scanners instead of Windows Defender), I suggest you check your mobile phone.
Comment has been collapsed.
yeah, i dont bite that part, why they ask me info about credit card to me, and someone else other more simple info, in the case that this happend, still have doubs, I mean, i didnt even lost accessto my account, still logued and playing normally. I cant know when the mail was changed, thats im asking them, date, hour, they must have that info.
My bank dosnt have any charge that isn´t mine. and only places online where I spend recently was in Steam itself, and HB.
edit: if you use online scanner, and recommned me one if posible, thanks in advance
Comment has been collapsed.
Malware Bytes is a good one.
But I agree your email was probably hacked. You should check with your provider and change your passwords there
Comment has been collapsed.
Password is a hard one, even I remember it (have written on paper too), and changed it too with all this just in case
Comment has been collapsed.
Thanks, its takes some minutes but found somethin in windows registry, dont know what was, so I delete that, and its a free trial for a few days, so i do another scan tomorrow
Comment has been collapsed.
Hacking 2FA is hard, but if you take that one out of the equation and the fact you did not receive any email, the most likely case is your mail got hacked and the mails simply got deleted. In mailbox you probably have receipts for purchases, bank statements(card number etc). Also many less secure pages allow to "recover" account via email, but if it's the email that gets hacked it allows to bypass almost all other security.
If you mail provider allows that check last access locations there
Comment has been collapsed.
Yeah that's my thought as well. Once your email is hacked, you're screwed because they also are going to delete email alerts for logins everywhere etc
Comment has been collapsed.
I check that, dont know if Microsoft is real what its shows, my email is from ´90s, and every time I check its shows thounthend of Incorrect tryes per mounth, maybe it real, and some bot farm tryes and tryes and tryes every hour
Just in case, in the image the first one is me (now), ask to log in to enter the Security Tab on Microsoft Account,
edit: Its similar to Valve hystory login, never found a "Correct connection from X country"
Comment has been collapsed.
So that's the most likely culprit. Do note that if a hacker tries to access your account he obviously wouldn't be using his own IP, rather a botnet or VPN which would explain the various locations from all over the world.
Make sure you change your email password(be sure to make it unique and don't reuse anywhere) and set 2FA for your outlook account. As I said previously if an email gets compromised that often allows to "hack" a lot of other accounts by just following account recovery steps
Edit I don't use outlook so don't know how many entries are stored in the history. if it's limited an easy way is to always do some faulty logins after an actual illegal access. That's why the most secure sites present last successful login an a separate entry.
Comment has been collapsed.
Yeah, I know botfarms exist, and probably the have the name of the email I use it for work, so its around in different pages that can have a leak), 2nd factor I have a gmail to access, its fuction similar, Hotm send a unique code to gmail. and at the same time, gmail its at my phone, so any try to log in, its send me an SMS to my phone number, and for some things uses the google code authenticator.
Comment has been collapsed.
Steam told you what happened, someone had enough of your payment info to convince them they were the legit account holder. This bypasses 2FA as it's Steam support making the change. Sound like you got lucky and found it before the hijacker got in to the Steam account (thus why you don't see any logins)
The type of info they request is detailed here: https://help.steampowered.com/en/faqs/view/40A0-8B4B-B54B-C51A
Either your CC number and address have been leaked online, or someone in your life is trying to jack you. From your description of your online habits, you sound fairly safe, so take a second look at who could have physical access (shitty friend/coworker maybe?).
And change your CC number NOW.
Comment has been collapsed.
Well I didnt think about that, just changed my Credit Card credentias, number and code are new now. My bank allow to do that online with virtual CC, I didnt even ask for a phisical one.
Edit: and about "steam told you", I doub about what they answer, looks like automatic answer for me, I did a joke to see if someone really read me, to check on next answer, but they talk about my items, and they are fine, i mean, nothing change in my inventory.
And, its a service, for what I see, I a demostrated my last found buyed, and the info they asked, why cant they tell me: "yes, someone changed the email on X day X hour, we think it were you or whatever" or "no, we dont have registered you (the user) change something, we have X problem".
I mean, I think I have the right to know that simple anwer they didnt give me
Edit2: Im a solitary man in real life, its me and my wife, no coworkers, i work for myself independent
Comment has been collapsed.
It's simple, someone went to Steam support with your name, address, and last 4 of CC, and said "Hey I lost access to my email and steam account, please let me back in, here is my personal info to prove it's me."
Steam support says, great, here's a new password sent to the new email.
You come along and say "Whoa whoa whoa, who changed my Steam account email?" and then prove to them it's you in the same way. But they are easy to set it back to you because as you said the email has been the same for a long time, so now Steam support knows the first request was a hijack.
So now you know, someone has at a minimum your name, address, last 4 of CC. That's why I said change the CC # right away and change it on any important accounts if it's saved there.
Comment has been collapsed.
Were you see it simple, I cant see that. dont want to be rude at any means, I just have my doubts
I mean, I evaluate that posibility, and clearly I could be hacked.
from what you said, I dont feel this could be posible
"let me back in", I was never disconected, I asume suport can see 2 Pc = 2 browser and 2 steam apps loged in, and my phone loged in, as part of the process to replace email and take out the Guard, and start form scrach, its more probably they disconect all devices first.
"here's a new password", they didnt change that, (I have no way to see if there is a hystoric of pass changed; other plataform inform, as example MS shows in Security tab something like: password last changed nov-2013, but steam dosnt, or at least I never see that) I did after I notice the different email, and in that process the systema ask my actual password that I imput and didnt have any trouble to change it.
if they provide a new password, its supouse that I coulnt enter, and that dosnt happends. Btw, pasword cant be changed from browser, only option is in the steam app. As far as I know, Steam Guard is the same; cant be changed from browser, only from the app. However, the hacker must log in somewhere, and in the SteamLoginHistory, there arent any connection from somewhere else than my town, my country.
however, I evaluate this as a posibility, but I want to Support to say me: Yes, we ere contacted with X info" as proof. Just to understand how and when it happends, could be a situation of a diference of minutes betwen me and the other person,
Of course I appretiate you advise, and changue the CC number, dont have this on any service by default, only recently HB for suscrition, that I have problem too with them.
Comment has been collapsed.
just a tip: if your english is bad, you can get good translations with AI like chatgpt and gemini. It will help you communicating with support.
Comment has been collapsed.
hope your issue was resolved & all the hijack being restored back to you. yeah, it is really upsetting to have discovered all this while being careful while using the internet etc
Comment has been collapsed.
Yeah. I can confirm steam part finally cooperate, giving me the info the other person used, and almost instandly I knew the leak of info comes from a HB.
HB support it's slower, takes days to respond every time I answer them. So it's going to take some time from now and on. But I wanted to bring news here, some of you take the time to read all that. Still need to define how that's happened,
But my steam account if fine now, at least now I considered this "safe"
Comment has been collapsed.
Thanks for the update. Thats must have taken a lot of energy to recover Steam. Humble support has really gone down hill for taking days to reply.
Comment has been collapsed.
Steam support is really good, nice that you're in control again of your account.
Comment has been collapsed.
That sounds terrible. I hope you could get it all settled without too much fuss by now and have more insight into how they actually got into your HB account and got hold of all your relevant data.
Also: Happy belated birthday, Ivannes! 💙🎂💙
Comment has been collapsed.
https://haveibeenpwned.com/ is a great site that can check if you're e-mail is in any of the hacked databases. My first e-mail, which I only use for spam now, is in 14 incidents :D. The best method to protect yourself is to create one or more emails for sensitive logins, and you don't use it elsewhere, you can always reroute those emails to your main. And use e-mails that have good protection. Google for example doesn't allow you to login without extra hoops if try to login from a different country. Hotmail/outlook has no such thing :/ My FB account got hacked that way :/
Comment has been collapsed.
First, thanks for the format info, images load better now
Second, I know haveibeenpwned, but its just says info about public news from the past, at least for me, It neves shows me something important, for example, that Twitter in 2023, dosnt mean that someone can enter me email, not even my twitter account, the only one I used a lot its from Arg; the old Taringa (nows gone), and remeber when thats happends, no.one get account stolen, but those base data are sell and gets more spam for sure,
But Hotmail/Gmail, all of them have 2nd factor nowadays
In my case explained here, my conclusion its from HB itself, one "inside" job, but I´m only one of millons, bad luck I guess.
If they replyed to my emails I´ll come back, but that for sure wont happends, already a mounth sending them emails and nothing, F*uck that guy from support
Comment has been collapsed.
I don't really understand what's happening aside from "I can't access my Humble stuff anymore and support is being an ass" but in the second to last pic (Excel .csv thing) your email is still visible, you might want to censor that.
Comment has been collapsed.
So, my BD was on May 21, If you are here for GAs, Im only have this at the moment Amnesia: The Bunker Lv 2
Dont want to use my credit card by now, just in case that i´m in big problem
And, I want to show tha BAD week Im having. In more than a decade using Steam, never have ben hacked, and now I dont know where i´m.
First, there are images with a lot of text, my english i basic, read them just if you want,
Thing is that On may 21, I entrered my humble Bundle account pretending to buy somethng to myself, and its didnt allow me, have some mesage like: "there is no an account with that email registrated", I was like WTF, I suscribed to munthly on may 6; I even ask about that here on SG and everything was fine, redeem the keys, and think about be a few another mounths susscribed to see if something goods comes around now that they rise the price, maybe good games are going to come.
So, used the restore password, HB found my email to do that; and can enter my account again, but, and here is the problem, my account is empty, like, nothing is there
Image 1
and start a comunication with Support to know whats happend
Image 2
but for now at least they dont give a solid answer of what could happend, I mean, If I entered my HB and choose the option to Delete account, its not lost forever, they stll have all my purchases on record. So no idea how its going to finish this. but I dont feel hacked, I feels like there is some kind of system problem, I have my HB account since 2015 at least, dont use it much, because HB sucks on pricing and many years Steam itself was cheapper for my here in argentina.
and at the end of may 21 I was frustated, and decided to not going to buy anything from them until I solve the situation.
and here comes the worst: so in may 22, I enter my steam, as always, without login, its loged by default on my home; and go to add founds to buy somenting for myselg, again, for my BD, and on Account Details, almost inmidiatly notices that my emial was changed, this email I use since the begining of my seam account, it was 2012/13, was showin "valvecorpcom@gmail.com" and no phone, i freack out and inmediatly start the process of changing my email back, add phone number, and the stupid sistem dosnt allow me to add back the Guard for 15 days.
At this moment, I really feel hacked, but with more questions than anwers, how did they enter? why he/she/they didnt changed the password, or desconected me form everywhere so I cant access to my account? why I dont have any email about anything? last time my phone broke (years ago) and I couldn´t transfer the Guard into another phone, and be obligated to do the process from the begining; the process send me emails to confirm, new codes into the email, for login in the new phone ak me the Recovery code (that I have writen down on a paper), there is nothing like that now, its simple vanish the 2nd factor and emai changed like for magic. Again, I was like WTF???
I did some quick change of email back to mine, Steam allow that with no problem, changue password of my account, check if there were another logins froms somewhere else on "SteamLoginHistory": there were none, and contacted support to try to know whats happend, again support, this are the worst support in the entire world.
Image 3
Image 4
Still waiting for an answer from them.
So, here comes where you tell me "you are so stupid Ivan", and share if at anytime, you read of hear of a similar situation.
Use Defender (from windows) on both PCs at home, nothing weir, im almoste never install programs, my life is very simple like work all the time with the same programs, use steam for games, I dont even remember when was the last tme I use torrent, but must be around 2012, finally: dindt found any virus or troyan, that make me think someone entered my pc itself, and from there to my accounts, I have a very "conspiracy idea" of someone on HB using last purchase keys info to ask steam support to gain access to my acount, but this is such a conspircy idea, that even I dont beleive its posible,
For now, im not going to use the credit card until I found a posible solution or have a better idea of WTF happened, both things are weir as F... Both Support arent even clear on their answers, HB didnt tell me anything trustefully, just ask for more and more info related, Steam, using auto answers and evading my question,
As always, and I dont interact that much here; sorry for my basic english.
If you read all that, coment your idea of whats could be, recomend me another antivirus (if its free better), I dont feel like formating boths pc, "just in case" because I dont find a logical explenation to this. If I was hacked, dont understand how, I dont introduce my credentials on suspisuis pages with a steam login 2nd factor codes ( to make me think it was cloned/hacked that), or untrusted places, just here on SG (and I didnt login here in ages) and backlog-assassins-net that im stil loged.in too since years, and its a trustefully place.
So, if its feats, share if you have read somewhre at somepoint from a similar situation.
I will update this if any of both support comes with something credible.
UPDATE 28/05/2025
For thos who read this (the first part), I dont wanna leave you without a ending.
Short version: They steal my HB account first, seems, before I suscribed to mounthly on May 6, from there, they contacted Steam support with number card info, name, and a few old keys to demostrate the ownership of the account, and all this happends, on the same day of my bithday, may 21, I tryed to enter HB, couldn't enter and restored the password, found the blank page (previews Image 1) and send them first contact to support, like an hour later, I tell to myself Fuck HB, lets adds found and make myself a gift from Steam directly, and found the email changed, by pure chance so at the end, It was more LUCK than anything.
Image 5 HB takes a few days to answer, but it finally comes
and found that F*** email there too.
The rest of conversation with Steam support until now. Tha last one, may be the only one, where someone real person take the time to sit and read me seriously, and resolve the parts of previews conversation that didnt have anything to do with "my case"
Image 6
Image 7
UPDATE 21/06/2025
From my last update, a few things have happend, first I had a very heavy month at work, so I didnt be around to much.
My last Communication with Valve, a commited a mistake checking store purchases, and in Image 8 Is the last part of the conversation, at this point Valve is out of the equation
Image 8
Humble didnt answer any more since May 27, I come back to them asking questions about how Someone stole my HB account, and never answer again, last email form them is on Image 5, confirming that the same email was use to steal my HB account, and try to steal Steam account.
Image 9 is my first try to get answers, and a few mails more, but dosn´t have any means to take more screenshot, they just didnt answer any more.
Image 10 and consecutives, are from a little experiment, where I use tha HB account of a friend thats is not more into gaming, to prove that the HB account email can´t be changed with no a single one communication (Images 10_01-10_04)
Image 10
Image 10_1
Image 10_2
Image 10_3
Image 10_4
At this point HB cant refuse that they dont want to help, and most probably blocked or marked my email as spam
I found; and this can be helpful for those who want to recover old keys### (those one that appear as Not available inside HB account info)
There is an option that allows you to get your info back, not the best way displayed, but all keys, with dates of purchases from the last 10 years will be there, all login and changes you made into your HB account will be there too.
In my case, I think 10 years is the time limite, cause I didnt get anything before 2015, (or some Son of a P... from HB delete that), knowing the games keys he gives to Steam are from 2014 HB Bundles this could be an option)
At the very end of HB page there is a "Don´t seel my personal Info" button << Image 11
Image 11
Image 12 is the option you need to click and complete with your email (the same email as HB account), and they send you a email with "2 csv" with all the info, as image 13 and 14 shows, bad thing is the format, you must remember the bundle name, or the date it was realised.
In my case, Codemaster Bundle (from 2015) is the old one that appear, and there is no key, but the rest is all there.
This is external to HB its seems, email will be from Ziff Davis Privacy Team
Image 12
Image 13 Example full of keys info
Image 14 This clarely shows I buy Mounthly May 2025
Conclucion:
Someone in HB tried to steal my Steam Account, and im 100% sure of this.
Even if I cant proove those keys - from 2014 bundle - are from there, I lost my record on 2017 cause my pc broke and could´t get my back-up from old years keys, yes, I had one, every purchase I do, I back up that data on an Excel, but lost the one before 2017, and about 2020 I stop doing that, now im restarting, better to keep an eye open.
The only othe place where thos keys could come is TremorGames, but whats are the posibilities that someone that wrked at TG is nowadays working on HB.... infinitely remote
and this is the end of my little experience with HB
Comment has been collapsed.