Valve Warns European Customers of Hack

Videogame platform maker Valve warned customers in Europe that one of its hardware partners was hacked, compromising the personal information of some Steam Machine and Steam Controller buyers.

“Between July 29, 2026 and August 1, 2026, a cyberattack hit CEVA Logistics, the company that ships Steam hardware to customers in Europe,” a Steam email to customers explains. “CEVA is still investigating this attack, but as Valve learned on August 7, certain information about Steam customers, including you, was likely compromised.”

That information doesn’t include payment information, passwords, or Steam Guard codes, but it could include the customers’ names, full addresses including country, phone numbers, email addresses, and the type and price of the hardware they ordered.

Valve tells these customers to “expect fake messages” via email, text message, or phone that mention their orders and pretend to come from Valve, Steam, or a delivery company.

“They [the fake messages] may quote your address back to you to prove they’re genuine,” Valve explains. “They may ask you to confirm a delivery, pay a small customs or redelivery fee, or sign in somewhere to ‘verify’ your order. Treat all of them as fake.”

Valve says that CEVA has isolated its affected systems and taken them offline, and it’s engaged with external investigators to learn more about the hack. Valve has separately alerted the data protection authorities in the impacted countries and is pressing CEVA for more information.