Valve Partner Hacked, European Steam Customer Details Exposed

A logistics partner for Valve was hacked in late July, with the attackers making off with customer data, including names, street addresses, phone numbers, and email addresses. Financial details weren't leaked, but if you're a European customer and recently ordered hardware from Valve—including the Steam Machine, Steam Controller , or Steam Deck —and use your Steam email and password for other online accounts, consider changing your passwords to be safe and watch for suspicious account activity. "Between July 29, 2026, and August 1, 2026, a cyberattack hit CEVA Logistics, the company that ships Steam hardware to customers in Europe," says Steam's message to potentially affected users, VideoCardz reports . Valve learned the attack on Aug. 7. Compromised data includes the buyer's name; their street address, including postcode and city; their country; phone number; email address (the same one the Steam account uses); and the type and price of the product they ordered. Valve says no other purchase information was compromised, nor was payment information, passwords, or Steam Guard data; CEVA was breached, not Valve. Unfortunately, the attackers appear to have quickly gotten to work using the information they stole to attack other accounts and platforms. Commenters on call out suspicious activity on social media accounts that use the same email address as their Steam account. If you use your Steam email and password across accounts and ordered any hardware from Valve in the last three months or so, be on the lookout for phishing emails, including surprise password reset requests. If you're emailed anything your order that requests payments, redelivery payments, account details, or anything similar, don't click any links in the email; go directly to Valve to double-check. CEVA has reportedly isolated the affected servers and is bringing in third-party investigators to determine what happened.

Financial details weren't leaked, but if you're a European customer and recently ordered hardware from Valve—including the Steam Machine, Steam Controller , or Steam Deck —and use your Steam email and password for other online accounts, consider changing your passwords to be safe and watch for suspicious account activity. "Between July 29, 2026, and August 1, 2026, a cyberattack hit CEVA Logistics, the company that ships Steam hardware to customers in Europe," says Steam's message to potentially affected users, VideoCardz reports . Valve learned the attack on Aug. 7. Compromised data includes the buyer's name; their street address, including postcode and city; their country; phone number; email address (the same one the Steam account uses); and the type and price of the product they ordered. Valve says no other purchase information was compromised, nor was payment information, passwords, or Steam Guard data; CEVA was breached, not Valve. Unfortunately, the attackers appear to have quickly gotten to work using the information they stole to attack other accounts and platforms. Commenters on call out suspicious activity on social media accounts that use the same email address as their Steam account. If you use your Steam email and password across accounts and ordered any hardware from Valve in the last three months or so, be on the lookout for phishing emails, including surprise password reset requests. If you're emailed anything your order that requests payments, redelivery payments, account details, or anything similar, don't click any links in the email; go directly to Valve to double-check. CEVA has reportedly isolated the affected servers and is bringing in third-party investigators to determine what happened.

"Between July 29, 2026, and August 1, 2026, a cyberattack hit CEVA Logistics, the company that ships Steam hardware to customers in Europe," says Steam's message to potentially affected users, VideoCardz reports . Valve learned the attack on Aug. 7. Compromised data includes the buyer's name; their street address, including postcode and city; their country; phone number; email address (the same one the Steam account uses); and the type and price of the product they ordered. Valve says no other purchase information was compromised, nor was payment information, passwords, or Steam Guard data; CEVA was breached, not Valve. Unfortunately, the attackers appear to have quickly gotten to work using the information they stole to attack other accounts and platforms. Commenters on call out suspicious activity on social media accounts that use the same email address as their Steam account. If you use your Steam email and password across accounts and ordered any hardware from Valve in the last three months or so, be on the lookout for phishing emails, including surprise password reset requests. If you're emailed anything your order that requests payments, redelivery payments, account details, or anything similar, don't click any links in the email; go directly to Valve to double-check. CEVA has reportedly isolated the affected servers and is bringing in third-party investigators to determine what happened.

Compromised data includes the buyer's name; their street address, including postcode and city; their country; phone number; email address (the same one the Steam account uses); and the type and price of the product they ordered. Valve says no other purchase information was compromised, nor was payment information, passwords, or Steam Guard data; CEVA was breached, not Valve. Unfortunately, the attackers appear to have quickly gotten to work using the information they stole to attack other accounts and platforms. Commenters on call out suspicious activity on social media accounts that use the same email address as their Steam account. If you use your Steam email and password across accounts and ordered any hardware from Valve in the last three months or so, be on the lookout for phishing emails, including surprise password reset requests. If you're emailed anything your order that requests payments, redelivery payments, account details, or anything similar, don't click any links in the email; go directly to Valve to double-check. CEVA has reportedly isolated the affected servers and is bringing in third-party investigators to determine what happened.

Valve says no other purchase information was compromised, nor was payment information, passwords, or Steam Guard data; CEVA was breached, not Valve. Unfortunately, the attackers appear to have quickly gotten to work using the information they stole to attack other accounts and platforms. Commenters on call out suspicious activity on social media accounts that use the same email address as their Steam account. If you use your Steam email and password across accounts and ordered any hardware from Valve in the last three months or so, be on the lookout for phishing emails, including surprise password reset requests. If you're emailed anything your order that requests payments, redelivery payments, account details, or anything similar, don't click any links in the email; go directly to Valve to double-check. CEVA has reportedly isolated the affected servers and is bringing in third-party investigators to determine what happened.

Unfortunately, the attackers appear to have quickly gotten to work using the information they stole to attack other accounts and platforms. Commenters on call out suspicious activity on social media accounts that use the same email address as their Steam account. If you use your Steam email and password across accounts and ordered any hardware from Valve in the last three months or so, be on the lookout for phishing emails, including surprise password reset requests. If you're emailed anything your order that requests payments, redelivery payments, account details, or anything similar, don't click any links in the email; go directly to Valve to double-check. CEVA has reportedly isolated the affected servers and is bringing in third-party investigators to determine what happened.

If you use your Steam email and password across accounts and ordered any hardware from Valve in the last three months or so, be on the lookout for phishing emails, including surprise password reset requests. If you're emailed anything your order that requests payments, redelivery payments, account details, or anything similar, don't click any links in the email; go directly to Valve to double-check. CEVA has reportedly isolated the affected servers and is bringing in third-party investigators to determine what happened.

CEVA has reportedly isolated the affected servers and is bringing in third-party investigators to determine what happened.