TechPowerUp reports AMD accidentally made 3 million Steam redeem codes for DiRT 3 public on its website. These keys are bundled with select Radeon graphics cards, but web users could access all of the keys due to an unprotected web folder on AMD's website.
According to the representative, those millions of keys were stored in an SQL database that could have been easily accessed by a simple missing .htaccess exploit. Steam might blacklist all those keys, and ask users with valid codes to re-register their products with AIB partners for fresh keys. Steam users reported a "Steam Key Giveaway" running on an infamous imageboard, to which the Bohemia Interactive representative responded.