Steam account and mail was hacked.

My Gmail was hacked yesterday by someone from Seatle , Washington, though i'm from italy. I managed to get back my account and did alot of security measurements, i have no idea how this person managed to change my password and my recovery email.... I got a huge scare since my steam account was linked to it, luckily the password was different, Then I changed the email from steam right the way.

But yea, something very weird since it never happened to me before, also my password is impossible to guess imo.

Yep keylogger...

That's why you never use the same password for multiple accounts. Every password should be unique, especially for email and accounts that have your credit card linked to.
Usually you can recover your mail by contacting your mail support (they'll ask you some questions that only you know the answer at, provided the info you put are correct).
As for your Steam account, you could try contacting support as well. They will check and notice the suspicious activity, and perhaps you'll get your account back.

Possibly they hacked your email and then found your steam account... This is really bad situation.

Format your computer, if you haven't done so, just to make sure that there won't be any keyloggers.
After that inform Steam support about the loss of your account and e-mail. It's also good to send photos of CD keys of box version games you own on Steam, that could speed up the whole process as otherwise you might be asked about it later.

You are using Windows 10?

you searched ur email and password in google?, maybe u play other games on private servers and u are using the same pass on steam. there are a lot of pastebins of hackers that acces poor db and leech all the users and passwords, later they sell that data to some people.

That's why you always use 2-step verification for your email (token, mobile app, SMS alerts etc) - this way even having your password it won't be possible to perform hijack.

What methor of password recovery did you use when you were setting up this email? Secret Question? Different backup email? Try to use it to reset your password. Also if you usedyour real info to register you can contact provider with scan of your ID, driver's licence etc to prove it's you and get your account back and from there contact Steam Support. If you created email with fake data and fake Password Recovery info - sorry, but you are screwed. Learn from it what not to do next time.

If you have any games which you activated on Steam with a CD-Key, you can contact Steam Support and if you provide them the CD-Key which was used on your account, they can help.

If you lost both your email and steam, then it has to be a key logger. Could be a friend who installed it without you knowing. Or could be a phishing link. Anyway, focus on getting your email account back and enable 2 step authentication on it. Once you have that getting your steam account should be easy.

Bump for solved, hard puzzle m8!

It's a key logger. Use phone verification next time. Contact Steam Support and send them some of your used bundle keys, credit card or phone number, they will contact you fast for this situation.

Pretty simple. unless you are using the same password for both steam and your email.
It will be someone close to you that know your password for both your Email and Steam Account.
Either your friend or family member got to know your password and access your account.
There is no hack or glitch as none of us have the problem and email and steam account do not link so even they can hack steam to get your password, they will not be able to access your email unless you are using the same password.
Somewhere on your claims, you are lying.
Therefore they have a way to access your account and change everything.
Stop lying to yourself and you will know the source of the problem.

Good info here for contacting Steam. Let me offer another suggestion. Once you've recovered your accounts and installed 2-factor authentication, get yourself a password manager like KeePass and have it randomly generate your critical passwords (email and basically any account that has critical data about you or that contains banking info). For those sites you access frequently, write down the randomized passwords and stick them in your wallet until you can type them in from memory.

You mentioned your password was hard to guess, but unless a computer generated it randomly, it's probably based on a pattern that has already been cracked. There are entire databases out there of containing the hashes for tens of millions of passwords that hackers routinely use to break into accounts. If they can get your hashed password, then it's a simple matter of looking it up in the database to find out your real password. There are also tools that apply common patterns and substitutions that can quickly crack your password even if it's long.

A reasonably secure password is randomly generated, uses numbers, mixed case letters and symbols and is at least 12 characters long. Password managers can easily generate ones that are longer and virtually unbreakable.

damn, that's extra scary :(

hope you can recover your accounts.