Don't bother changing your password if you have steam guard. No passwords were leaked.
NIST explicitly says accounts with MFA don't have to be reset.
the codes that were 'leaked' are supposed SMS based 2fa but those expire after 15 min. So in the time you read this the code has expired.