Don't forget Valve never officially acknowledged that as having happened at all, likely because they could get into some deep, deep trouble if they did. Payment methods visible (probably useable, though I haven't heard anything on that matter) and your home address was visible as well if you'd ordered a Steam Machine or Steam Controller through Steam itself.