Thank goodness for two-factor authentication. I woke up this morning to evidence that someone had attempted to log into my account in the wee hours. I got an authentication code text in Serbian from the legit Steam account that sends those out. I immediately logged in and changed my password.
If you haven’t changed your password in a long time, it might be a good opportunity to do so. I seriously doubt my account was targeted individually.