Valve is proactively notifying a subset of its Steam community—particularly those who have recently acquired Valve‑branded hardware—that its European logistics partner, CEVA Logistics, fell victim to a cyberattack in late July.
The information surfaced directly from the user base, with several posts on ResetEra and Reddit in the past few hours detailing an email from Valve that outlined the CEVA Logistics incident.
According to the email, the breach occurred sometime between July 29 and August 1, 2024, although Valve only became aware of it on August 7. Dutch news outlet NOS reported that on August 1, two separate retailers—Bol and De Bijenkorf—were notified of the cyberattack.
While the message explicitly states that data linked to users’ Steam accounts or other purchases was not compromised, it cautions that phone numbers, addresses, email addresses and names “may have been compromised.”
❓ Frequently Asked Questions (FAQ)
Which users are affected by the CEVA Logistics breach?
Valve is notifying users who have recently purchased Valve‑branded hardware that was shipped through CEVA Logistics. The notification is limited to that subset of the Steam community and does not cover all Steam users.
What personal data might have been compromised?
According to Valve, data linked to Steam accounts or purchases was not compromised. However, phone numbers, addresses, email addresses and names associated with the affected users may have been exposed.
What steps is Valve taking to protect users?
Valve is proactively informing affected users, monitoring for suspicious activity, and working with CEVA Logistics to investigate the breach. They are also encouraging users to review account security, change passwords, and enable two‑factor authentication to mitigate potential risks.
News Source: Kotaku
Comments
Be the first to comment.