在Steam的冬季销售期间，大约有34000名用户的个人信息暴露给了其他用户。这个缺口很不寻常。Valve称，合作伙伴试图通过部署新的缓存规则来抵御拒绝服务攻击，希望将恶意流量与正常客户流量区分开来。对于许多用户来说，在尝试登录Steam帐户时，更改会意外地加载另一个人的信息。

用户无法进行购买或访问其他人帐户上的信用卡信息，但他们可以查看该人的电子邮件地址、购买历史记录和帐单地址等详细信息。Valve承诺会通知任何受到影响的人，并解释违规行为。那封电子邮件终于发出了。

“我们很抱歉发生这种情况，”来自Valve的消息说，“我们已经采取措施防止将来发生这种问题。”。担心你的账户在圣诞节被黑客入侵是没人想要的礼物。

我们在下面提供了完整的电子邮件。

Dear Steam User,

As you may know, for a brief period on December 25th, a configuration error resulted in some Steam users seeing incorrectly cached Steam Store pages generated for other Steam users. If you are not familiar with the issue, an overview of what happened is available at http://store.steampowered.com/news/19852/ .

If you accessed the Steam Store between 11:50 PST and 13:20 PST on December 25th, your account could have been affected by this issue. If you did not use the Steam Store during that time, your account was not affected.

Between the times above, a requested web page displayed during your Steam Store checkout process may have been incorrectly displayed to another Steam user in your local area. This page may have included billing information previously saved to complete future purchases including your full name, billing address and billing phone number. It may have also included the last two digits of a credit card number or a PayPal email address, if previously saved for future purchases. It did not include full credit card numbers, Steam account passwords, or other information that would allow another user to complete a transaction with your billing information.

We are contacting you because an IP address previously used by your account to access Steam made a web page request as described above. Because IP addresses are commonly shared for home networks, mobile devices and by internet providers, we are unable to verify that your account was actually the one that made this request. For example one affected IP address was previously used by over 1,700 Steam accounts. C***equently we are notifying all users who have previously used this IP address.

This event did not make it possible to compromise your Steam account or make a fraudulent transaction from your account, but we want you to be aware of what information could have been seen by another Steam user.

We're sorry this happened and have taken steps to prevent this problem from occurring in the future.

If you used the store between 11:50 PST and 13:20 PST on December 25th and you have questi*** please email [email protected].

- Valve