Valve emailed European Steam hardware buyers on August 10, 2026 after attackers stole delivery data from CEVA Logistics, its European shipping partner. Names, addresses, phone numbers, emails and the item and price leaked; Steam passwords, Steam Guard codes and payment details did not.
Read the full story: Valve warns Steam hardware buyers of CEVA data breach →
Transcript
Valve emailed European Steam hardware buyers this morning about a data breach, and it did not happen at Valve. It happened at CEVA Logistics, the contractor that ships Steam Machines and controllers across Europe. Attackers were inside CEVA from July twenty ninth to August first. Valve found out on August seventh. Customers found out today. What leaked is the shipping file: your name, your street address, your phone number, your email, and the type and price of the hardware you ordered. No Steam passwords, no Steam Guard codes, no card details, because CEVA never held any of those. Here is why the shipping file is worse than it sounds. It tells a scammer that a specific person, at a specific address, is waiting on a specific expensive parcel. So expect texts about a held delivery and a small customs fee. They will quote your real address back to you. Treat every one of them as fake.