Valve officially talks about the Steam Winter Sale account fiasco.

[Conina]

And thanks to Steam Guard (two-factor-authentification) the hostile takeover of your Steam account didn't work. I wish that the console accounts also would support 2FA.