TheTome56: I used to be a big supporter of Steam
Until my account got stolen from me by another user due to a hole in their Password reset system that happened this July.
And here I am, five weeks later still waiting on some kind of response from their "customer support" to return the account I lost because of their inability to notice and fix an obvious password reset error.
Oh, and the Steam Community loves vitcim blaming. They seem to think the only reason you get hijacked is because you're a 12 year old kid who goes to phishing websites. That's apparently more plausible then actually admitting that Valve makes mistakes to that community of white knights.
Probably because getting phished is the main way people get their account hijacked on Steam.
As for that Password reset security 'hijack'? I assume that means you turned off your account security? (Steamguard). Because that's the only way they could've hijacked your account using that method, since there was no way for them to get to your email. The only thing that flaw allowed them to do was change the password, *if* they knew your account name (not profile name). Long as Steamguard was on that means they wouldn't have been able to log in without triggering Steamguard and so at worst you had to recover your own password after.