Twilio, which recently provided a two-step verification (two-factor authentication) system for multiple services such as Steam, is suspected to have been hacked and some data has been leaked.
According to game reporter Mellow_Online1, overseas websites are buying and selling logs of two-step verification intermediate service providers called Twilio.Steam's two-step verification system allegedly used (or is using) the company's services.
It is reported that the leaked data includes the two-step verification code information sent to the user, the sending status (whether the sending is successful), metadata (timestamp, recipient number, etc.), and the routing fee required to send the information.
This incident was not the intrusion of the Steam platform itself, and its internal servers and databases remain intact.What is leaked is just a temporary verification code, and the actual risk level is still unclear, but if the relevant reports are true, this incident is still worrying.It is recommended that users continue to be vigilant and avoid clicking on suspicious information or links.