Valve security incident: what customers need to know