What data was stolen in the CEVA Logistics cyberattack?

Hackers accessed names, addresses, phone numbers, emails, and details of purchased devices (e.g., Steam Deck). Payment data, passwords, and Steam Guard codes were not compromised.

How can I protect myself from phishing attacks after the data breach?

Avoid clicking links in suspicious messages, manually enter official Steam website addresses, and ignore requests for additional payments or account credentials.

Do I need to change my Steam account password after this incident?

Valve states that changing passwords or account settings is unnecessary, as login credentials were not compromised.

← All news

Security

Cyberattack on European Steam Distributor: Customer Data at Risk

August 10, 2026

Photo: Tom's Hardware

Quick answer

A cyberattack on Steam’s European distributor CEVA Logistics led to the theft of customer personal data, including names, addresses, and order details.

Valve has warned European customers about a cyberattack on its logistics partner CEVA Logistics, during which hackers stole personal data of Steam hardware buyers. The incident occurred between July 29 and August 1, 2026, with the breach discovered on August 7.

The hackers obtained data that CEVA stores for order processing, including names, delivery addresses, phone numbers, emails, and details of purchased devices (such as Steam Deck or Steam Machine). However, payment details, passwords, and Steam Guard codes were unaffected, as they are not shared with the distributor.

Valve expects cybercriminals to use the stolen data for phishing campaigns via email, SMS, or phone calls. Scammers may demand additional payments for "customs fees" or direct users to fake websites to steal credentials. The company strongly advises ignoring such requests and avoiding links in suspicious messages.

To verify message authenticity, users are encouraged to manually enter official Steam website addresses: help.steampowered.com, store.steampowered.com, or steamcommunity.com. Valve also reminds users that Steam support never requests passwords or Steam Guard codes.

CEVA Logistics has isolated affected systems and notified regulators. External cybersecurity experts are investigating the incident.

Common questions

What data was stolen in the CEVA Logistics cyberattack?: Hackers accessed names, addresses, phone numbers, emails, and details of purchased devices (e.g., Steam Deck). Payment data, passwords, and Steam Guard codes were not compromised.
How can I protect myself from phishing attacks after the data breach?: Avoid clicking links in suspicious messages, manually enter official Steam website addresses, and ignore requests for additional payments or account credentials.
Do I need to change my Steam account password after this incident?: Valve states that changing passwords or account settings is unnecessary, as login credentials were not compromised.

Dzen feed: /feed/dzen.xml · RSS: /feed.xml