A known cybercriminal and leaker, EnergyWeaponUser, is selling a new database allegedly containing more than 89 million Steam user records, phone numbers, and one-time access codes on the dark web.
The source of the leaked database remains unknown, with speculation that it may have originated from a supply chain attack on Twilio, a cloud communications platform that provides SMS and MMS messaging services for companies.
Twilio denied being breached and stated that there is no evidence to support the claim that the leaked data was obtained from their platform.
Steam is advising its users to enable Steam Guard Mobile Authenticator and monitor their account activity in response to this potential data leak.