Steam person information ‘could have been compromised’ by a cyberattack focusing on Valve’s European delivery associate

Earlier this morning, Valve started contacting prospects who’ve bought Steam {hardware} in Europe to inform them that one among its regional delivery companions, CEVA Logistics, was the topic of a current cyberattack that “probably” uncovered their private data.

In its e-mail—shared by notified customers on Reddit and elsewhere—Valve mentioned the assault passed off someday between July 29 and August 1, 2026. The corporate defined that the attackers focused “particular delivery-related data” that Valve offers to CEVA Logistics as a way to fulfill {hardware} orders for European prospects, which the France-headquartered delivery firm retains “for as much as 90 days after that order.”

In an announcement emailed to PC Gamer, Valve confirmed that it first realized of the assault on August 7.

“Over the weekend extra particulars got here by that allowed us to assemble a listing of shoppers that we see vulnerable to having been affected,” Valve instructed PC Gamer. “Although CEVA remains to be investigating the assault, we wished to no less than ship out messaging to all prospects we will assume had been affected based mostly on what we at the moment know.”

Valve says the identify, avenue addresses, cellphone numbers, e-mail addresses, and order particulars of European prospects whose orders had been fulfilled by CEVA Logistics “could have been compromised.”

You could like

The corporate warns that affected customers needs to be vigilant about fraudulent messages masquerading as Valve or a supply firm, and that these makes an attempt may use compromised data to look real. Nonetheless, Valve says customers should not want to alter their passwords, and since its delivery companions aren’t supplied with any buyer fee data or different non-delivery particulars, any unrelated Steam account data ought to nonetheless be safe.

In keeping with FreightWaves reporting, eight CEVA warehouse hubs had been affected by the cyberattack, inflicting delivery delays throughout Europe for its retail companions.

It is unclear what number of customers in complete have been affected by the breach: Valve itself remains to be working to get all the main points of the cyberattack, because it says it is “urgent CEVA for the complete scope of what was taken and the way” whereas it really works with information safety authorities in respective European international locations. In an announcement given to TechCrunch, CEVA says its “thorough investigation” of the incident remains to be ongoing.