It was social engineering.

They compromised a Steam account via steam support to test its password and because it a linked they gained access and modified about 60 accounts.