Last Update: 10/27/2026 at 6:00 AM EST

CEVA–Valve Customer Data Breach

Coverage from The Record, DesignTAXI, and others

CEVA–Valve Customer Data Breach topic image

A cyberattack affecting CEVA Logistics exposed or potentially exposed delivery information for European customers who ordered Valve hardware, including Steam Machines and Steam Controllers.

The data reportedly included names, addresses, phone numbers, email addresses, order details, product information, and prices, while payment data, Steam passwords, and Steam Guard codes were not accessible to CEVA. Valve warned that criminals could use the information for convincing emails, texts, or calls seeking customs fees, redelivery payments, delivery confirmation, or fake account verification. CEVA isolated affected systems and investigated the incident, while Valve began notifying customers and authorities.

Looking Back
17 Day Timeline
Aug 5Aug 8Aug 11Aug 15Aug 18Aug 21
All Articles31 articles
Interesting31 articles · CI Score 45–59
The Record / Daryna Antoniuk
De Bijenkorf said in Amsterdam that a cyberattack on an external logistics provider delayed deliveries, returns, and refunds while potentially exposing customer information.
8/5/2026 • Data Breaches & Exposure Events • General
DesignTAXI
CEVA Logistics disclosed a July 2026 cyberattack affecting European delivery systems, exposing Pokémon Center and Valve customer information and disrupting shipments.
8/20/2026 • Data Breaches & Exposure Events • General
CPO Magazine / Alicia Hope
Unauthorized parties accessed Ceva Logistics servers between July 29 and August 1, 2026, affecting eight European warehouses and exposing customer information for multiple companies.
8/14/2026 • Data Breaches & Exposure Events • General
Safestate
Valve notified European Steam hardware customers on August 10, 2026, after attackers stole shipping records from CEVA Logistics during a July 29-August 1 intrusion.
8/13/2026 • Data Breaches & Exposure Events • General
Spikey Bits / Travis Pasch
Valve notified Steam hardware customers after attackers compromised CEVA Logistics systems in Europe between July 29 and August 1, exposing contact and order information.
8/10/2026 • Data Breaches & Exposure Events • General
Hardware Busters
Valve notified European customers after CEVA Logistics discovered a late-July breach exposing hardware delivery information used for shipments across Europe.
8/10/2026 • Data Breaches & Exposure Events • General
BleepingComputer / Sergiu Gatlan
Valve notified European Steam hardware customers in August 2026 after attackers accessed CEVA Logistics servers and exposed delivery-related personal information.
8/10/2026 • Data Breaches & Exposure Events • General
The Verge / Emma Roth
Valve warned European Steam hardware customers after CEVA Logistics suffered a July 29-August 1 breach potentially exposing delivery contact information.
8/10/2026 • Data Breaches & Exposure Events • General
IGN / Tom Phillips
Valve notified European Steam hardware customers in 2020s about a suspected CEVA Logistics breach that may have exposed delivery information and enabled targeted scams.
8/10/2026 • Data Breaches & Exposure Events • General
Engadget
Valve warned European Steam hardware customers after CEVA Logistics suffered a July cyberattack that likely exposed contact and order information.
8/10/2026 • Data Breaches & Exposure Events • General
McAfee / Brooke Seipel
Pokémon Center notified United Kingdom and Germany customers after attackers accessed CEVA Logistics systems between late July and August 1, exposing contact and order information.
8/21/2026 • Data Breaches & Exposure Events • General
Renascence
Ceva Logistics experienced a vendor data breach affecting shipment-related customer information for banking, retail, and gaming companies across multiple industries, with the incident's timing unspecified.
8/15/2026 • Data Breaches & Exposure Events • General
Security Affairs / Pierluigi Paganini
CEVA Logistics suffered a July 29 cyberattack in Europe that disrupted eight warehouses and exposed customer and shipment information.
8/12/2026 • Data Breaches & Exposure Events • General
Kotaku / Lewis Parker
Valve is emailing European Steam hardware purchasers after CEVA Logistics suffered a cyberattack between July 29 and August 1, with exposure details unconfirmed.
8/10/2026 • Data Breaches & Exposure Events • General
IGN / Tom Phillips
Valve began notifying European Steam hardware customers about a suspected CEVA Logistics breach that may have exposed delivery information retained during the previous 90 days.
8/10/2026 • Data Breaches & Exposure Events • General
BetaNews
CEVA Logistics suffered a multi-day cyberattack from July 29 to August 1, 2026, potentially exposing delivery information for Valve Steam customers in Europe.
8/10/2026 • Data Breaches & Exposure Events • General
HotHardware / Chris Harper
Valve warned European Steam Hardware customers in August 2026 that a CEVA Logistics breach may have exposed shipping information handled during the preceding three months.
8/10/2026 • Data Breaches & Exposure Events • General
Neowin
Valve notified European hardware customers after CEVA Logistics suffered a July cyberattack that potentially exposed delivery-related personal information.
8/10/2026 • Data Breaches & Exposure Events • General
Rocketnews
Valve disclosed that a CEVA Logistics breach between July 29 and August 1 potentially exposed Steam hardware customers' delivery information in Europe.
8/10/2026 • Data Breaches & Exposure Events • General
Cybersecurity Insiders / Naveen Goud
Levi Strauss and Valve investigated separate 2026 privacy incidents involving social engineering against employees and a CEVA Logistics exposure potentially revealing European Steam hardware customer records.
8/10/2026 • Data Breaches & Exposure Events • General
Polygon / Elijah Gonzalez
Valve warned European Steam hardware customers after CEVA Logistics reported an August 7 cyberattack that exposed contact and purchase details and could support targeted delivery scams.
8/10/2026 • Data Breaches & Exposure Events • General
Windows Central / Ben Wilson
Valve warned European Steam hardware customers after a CEVA Logistics cyberattack on August 7 potentially exposed order-related names, addresses, and phone numbers.
8/10/2026 • Data Breaches & Exposure Events • General
Cleveland.com / Claudia Dimuro
CEVA Logistics confirmed on August 1 that a July 29 cyberattack affected eight European warehouses, exposing possible customer data and disrupting shipments for clients including Valve.
8/10/2026 • Data Breaches & Exposure Events • General
Cybernews / Anton Mous
Ajax disclosed that unauthorized access to CEVA Logistics systems potentially exposed webshop customer data and delayed orders in the Netherlands.
8/10/2026 • Data Breaches & Exposure Events • General
TechRadar / Sead Fadilpašić
CEVA Logistics suffered a cyberattack beginning July 29 that disrupted at least eight European warehouses and potentially exposed customer order data, prompting reports to Dutch authorities.
8/11/2026 • Data Breaches & Exposure Events • General
The Record / Daryna Antoniuk
In early August, a cyberattack on Ceva Logistics disrupted eight European warehouses and potentially exposed customer data for Bol, Valve, and other clients.
8/11/2026 • Data Breaches & Exposure Events • General
Help Net Security / Sinisa Markovic
CEVA Logistics suffered a July 2026 breach affecting European Steam hardware customers, and Valve notified potentially impacted customers after learning of the compromise on August 7.
8/10/2026 • Data Breaches & Exposure Events • General
TechCrunch / Zack Whittaker
CEVA Logistics reported a cyberattack affecting eight European warehouses and exposing delivery information for customers of multiple companies, while Dutch authorities investigated.
8/10/2026 • Data Breaches & Exposure Events • General
CNET / Tyler Graham
Valve warned European Steam hardware customers after CEVA Logistics reported a cyberattack affecting delivery information and warehouse operations in the Netherlands.
8/10/2026 • Data Breaches & Exposure Events • General
Breakbulk.News
CEVA Logistics suffered a cyberattack affecting eight European warehouses after August 1 customer notifications, exposing potentially accessed customer data and disrupting retailer fulfillment.
8/10/2026 • Data Breaches & Exposure Events • General
Goal.com
Ajax notified supporters after CEVA Logistics suffered a vendor breach affecting delivery and return operations in Amsterdam, with personal-data exposure under investigation and reported to the Dutch Data Protection Authority.
8/7/2026 • Data Breaches & Exposure Events • General