Things are not really clear right now:

As such, we’re in a strange limbo, and we’re not totally sure where this leak came from. Until the dust clears, it’s a good idea to change your Steam password if you don’t have any additional security.