Valve has issued an urgent warning to its European customer base after a cyber attack targeted CEVA Logistics, the third party responsible for fulfilling Steam Machine and Steam Controller shipments across the region. The breach occurred between late July and early August, though Valve only became aware of the situation when CEVA notified them on August 7. While the gaming giant emphasizes that sensitive data like passwords and credit card numbers remained secure, a significant amount of personal identity information was exposed during the incident.
According to Valve, the stolen data includes customer names, residential addresses, phone numbers, and the email addresses linked to users’ Steam accounts. It also appears that specific details regarding hardware purchases, such as the item type and price paid, were compromised. Because CEVA typically retains this shipment data for ninety days, Valve is proactively reaching out to anyone whose information might have been stored in those systems during the window of the attack.
The primary concern now is a surge in highly convincing phishing attempts. Valve warns users to be extremely skeptical of any emails, texts, or phone calls claiming to be from the company or a delivery service. Since hackers possess actual home addresses and order histories, they may quote these specific details back to victims to build trust before asking for redelivery fees or directing them to fraudulent verification pages designed to steal credentials or install malware.
In response to the leak, CEVA Logistics has reportedly taken affected systems offline and enlisted external investigators to determine exactly how the breach happened. Valve is currently working with various European data protection authorities to ensure regulatory compliance while urging users to remember that official support is only handled through their verified website. For now, there is no need for users to change their passwords, provided they remain vigilant against unsolicited communications mentioning their past hardware orders.