Those who made a recent Steam hardware purchase will need to be careful.
Steam users who have recently purchased Steam hardware from Valve need to take extra precaution. Valve has confirmed that Steam hardware customers in Europe may have been affected by a recent data breach against CEVA Logistics, the European logistics company Valve uses to ship Steam hardware across the continent. Valve has started emailing Steam users in Europe about the issue, with some sharing the news on social media and community pages like Reddit.
What happened in the CEVA Logistics data breach?
CEVA Logistics was hit by a cyberattack between 29 July and 1 August 2026. According to Valve's email to affected customers, the company learned on 7 August that certain information belonging to Steam customers was likely compromised in the attack. CEVA receives specific delivery-related information from Valve to ship Steam hardware to customers across Europe. The logistics company told Valve that this information was likely taken by the attacker. The distribution company is still investigating the cyberattack and determining the full extent of the breach.
Which Steam users may have been affected?
Steam users in Europe who purchased Steam hardware within the past 90 days may have been affected by the breach. CEVA retains the delivery information it receives from Valve for up to 90 days after an order. Because of this, Valve said it is sending the warning to all customers it can assume were impacted during that period.
According to Valve, the compromised information may include customers' names, street addresses, postal codes, cities, countries, phone numbers and email addresses, including the same email address used for their Steam account. The type and price of the Steam hardware ordered may also have been exposed. Valve stressed that CEVA does not have access to customers' payment information, passwords, Steam Guard codes or other Steam account information. Information related to other Steam purchases was also unaffected.
Valve warns Steam users to expect fake messages
The leaked information could now give scammers enough real details to make their messages much more convincing. "Expect fake messages, email, SMS, or phone, that mention your hardware order and appear to come from Steam, Valve or a delivery company," Valve warned in the email.
Those messages may go beyond simply knowing what a customer ordered. Valve said scammers could quote a person's address back to them to appear legitimate, before asking them to confirm a delivery, pay a small customs or redelivery fee, or sign in somewhere to "verify" their order. "Treat all of them as fake," Valve said.
Affected customers do not need to change their Steam passwords or adjust their account settings. Instead, Valve is asking users to pay attention to where supposed Steam messages are coming from. Steam Support only handles account issues through https://help.steampowered.com/, not through email, Steam Chat, or Discord.
The same goes for login links. Legitimate Steam login pages are only hosted on store.steampowered.com, www.steampowered.com, steamcommunity.com, with Valve recommending that users type the address themselves rather than follow a link they were sent. Neither Steam Support, nor a courier will ever ask for a Steam password or Steam Guard code.
What is Valve doing about the CEVA data breach?
Valve is still trying to determine exactly how much Steam customer information was caught in the breach, saying it is "pressing CEVA for the full scope of what was taken and how."
CEVA has already isolated the affected systems and taken them offline, with outside investigators now looking into the cyberattack. Valve, meanwhile, is notifying data protection authorities across the affected European countries. Customers who still have questions can contact Valve through its Steam Support site. The company has also designated Artana Digital GmbH in Hamburg, Germany as a separate contact point for information about the incident.
The breach also comes just a few months after Valve released the Steam Machine toward the end of June, while some of its other Steam hardware recently received price increases.
