45 unknown Steam Wallet transactions in 30 seconds

[FerrariVie]

Hi guys, today I received about 45 emails from Steam Community Market saying that a bunch of my icons, backgrounds and trading cards were sold and then other items bought by me using that wallet credit. All happened in about 30 seconds or so, and sold/bought from several different users.

Has anything like this happen to anyone here? I did not actually loose money (only some of those not very valuable earned items), but something looks weird and I'm concerned about what the issue might be. I have steam guard on my phone, but no notification came through asking for new approvals, so do you think the issue should be with my computer? My phone? Steam account? Or none?

Any tips on what should I do next?

 

[SpyderTracks]

Hi guys, today I received about 45 emails from Steam Community Market saying that a bunch of my icons, backgrounds and trading cards were sold and then other items bought by me using that wallet credit. All happened in about 30 seconds or so, and sold/bought from several different users.

Has anything like this happen to anyone here? I did not actually loose money (only some of those not very valuable earned items), but something looks weird and I'm concerned about what the issue might be. I have steam guard on my phone, but no notification came through asking for new approvals, so do you think the issue should be with my computer? My phone? Steam account? Or none?

Any tips on what should I do next?

You want to reset your password immediately and then I'd remove any payment forms from the site for now.

 

[TonyCarter]

You want to reset your password immediately and then I'd remove any payment forms from the site for now.

Give it a few minutes please, I haven’t quite finished

 

[FerrariVie]

You want to reset your password immediately and then I'd remove any payment forms from the site for now.

I didn't have any payment forms saved, I always add card details only at the moment of purchase everywhere. Annoying yes, but a lot safer that way. For sure they would've used that or wallet credits if I had any.

What really bugs me is how could they access my account if I have steam guard on my phone? Knowing/guessing the password should not be enough. I even went into the steam app and saw my authorised devices, and all where mine with my own ip address (or possible range of my city).