RESOLVING THE LEDGER
This is one outlet's own report from PC Gamer — the article as it was filed. Other outlets are covering the same event; open the full story to compare every source side by side.
See the full story · 2 sources
Earlier this morning, Valve began contacting customers who have purchased Steam hardware in Europe to notify them that one of its regional shipping partners, CEVA Logistics, was the subject of a recent cyberattack that "likely" exposed their personal information.
In its email—shared by notified users on Reddit and elsewhere —Valve said the attack took place sometime between July 29 and August 1, 2026. The company explained that the attackers targeted "specific delivery-related information" that Valve provides to CEVA Logistics in order to fulfill hardware orders for European customers, which the France-headquartered shipping company retains "for up to 90 days after that order."
PSA: European-Logistics Partner for Steam hit in Cyberattack from r/Steam
In a statement emailed to PC Gamer, Valve confirmed that it first learned of the attack on August 7.
"Over the weekend more details came through that allowed us to assemble a list of customers that we see at risk of having been affected," Valve told PC Gamer. "Though CEVA is still investigating the attack, we wanted to at least send out messaging to all customers we can assume were affected based on what we currently know."
Valve says the name, street addresses, phone numbers, email addresses, and order details of European customers whose orders were fulfilled by CEVA Logistics "may have been compromised."
The company warns that affected users should be vigilant about fraudulent messages masquerading as Valve or a delivery company, and that those attempts might use compromised information to seem genuine. However, Valve says users shouldn't need to change their passwords, and because its shipping partners aren't provided with any customer payment information or other non-delivery details, any unrelated Steam account information should still be secure.
According to FreightWaves reporting, eight CEVA warehouse hubs were affected by the cyberattack, causing shipping delays across Europe for its retail partners.
It's unclear how many users in total have been affected by the breach: Valve itself is still working to get all the details of the cyberattack, as it says it's "pressing CEVA for the full scope of what was taken and how" while it works with data protection authorities in respective European countries. In a statement given to TechCrunch , CEVA says its "thorough investigation" of the incident is still ongoing.
2026 games : All the upcoming games Best PC games : Our all-time favorites Free PC games : Freebie fest Best FPS games : Finest gunplay Best RPGs : Grand adventures Best co-op games : Better together
AIPROPX is an independent multi-source news index — we track, compare, and connect coverage from across the web into one place you won't find anywhere else.