Steam delivery data exposed; phishing alert