Valve has reportedly suffered a data leak linked to the delivery of Steam hardware in Europe. In the morning, European customers received an email from the Steam developer that the third-party company CEVA Logistics, responsible for shipping Steam hardware across Europe, was targeted in a cyberattack between July 29 and August 1, 2026. The leak has raised concerns for people who have bought devices such as the Steam Deck through the service.
To deliver devices, CEVA needs customer details; thus, the attackers might have accessed a particular set of information tied to hardware orders, including full name, street address, postal code, city, country, phone number, email address linked to the Steam account, and the price of the ordered product.
However, Valve assured that CEVA never had access to payment details, Steam passwords, Steam Guard codes, or any other Steam account data. So, customers can rest assured that none of them got hacked. Anyway, Valve warned customers that more phishing attempts may happen. The scammers may try email, text, or phone that references their hardware order to appear legitimate.
The company is reportedly pushing CEVA for details of the attack to understand the breach's scope and method. This will help the company take necessary steps to protect customer data from further risk.
A stolen delivery record can be useful to scammers. They may use real order details to make fake messages look genuine. A buyer could receive an email or text claiming that a package is delayed and asking them to pay a small fee.
Another trick could involve fake tracking links. These links may lead users to a website that looks like a real delivery page. Once there, victims could be asked for card details, passwords, or other private information.
Steam hardware buyers should be careful with unexpected delivery messages. It is safer to check an order through the official Steam account instead of clicking a link in a message.
Also Read: OpenAI Slows Astra Development After Critical Cybersecurity Review
The reported leak is a reminder that even trusted delivery networks can become targets. Buyers should watch their inboxes and phones for strange messages, especially if they recently ordered Steam hardware.
Valve customers should avoid sharing payment details through links sent by unknown sources. A real order may give scammers enough information to make a fake message look convincing.