In early August, a cyber attack reportedly occurred at a logistics company responsible for shipping Steam hardware. Here’s what we know so far and what you should be aware of.
This is the current status: There is currently a message from Valve indicating a cyber attack on CEVA Logistics. The company is responsible for shipping Steam hardware within Europe. During the attack, personal data of buyers may have been stolen.
If you have purchased hardware through Steam, the attackers may have gained access through your name, address, phone number, and email address.
Hackers steal personal data of Steam customers in cyber attack
What has happened: Between July 29, 2026, and August 1, 2026, disruptions occurred at the logistics company CEVA Logistics as a result of a cyber attack. Customer data may have been compromised. The Dutch data protection authority, other law enforcement agencies, and the company itself are investigating the case.
Today, on August 10, 2026, users are now reporting via Reddit that they have received emails from Valve pointing to the cyber attack. It states: “As Valve learned on August 7, certain information from Steam customers, including you, was likely compromised.”
CEVA is responsible for shipping Steam hardware within Europe and retains relevant data for up to 90 days. Therefore, if you have purchased hardware such as a Steam Deck, Steam Machine, or Steam Controller directly from Steam in the past months, your data may have fallen into the hands of the attackers.
Specifically, according to the email, the data in question includes:
- Your name
- Your address including street name, postal code, city, and country
- Your phone number
- The email address associated with your Steam account
- The type and price of the purchased product
Further information such as bank details or passwords are said to be secure.
What you need to watch out for in messages now
What does this mean for you? According to Steam, affected customers should now expect a number of fake messages and calls. Fraudsters may impersonate Steam, Valve, or a delivery service and use your data as supposed proof of their authenticity. They might ask you to confirm a delivery or pay a fee. You should generally consider these messages to be fake.
You can check if a message is legitimate in the following ways:
- The real Steam Support is reachable at https://help.steampowered.com/de/ and never contacts you via email or through Steam chat or Discord.
- Every legitimate login page of Steam is accessed via store.steampowered.com, www.steampowered.com, steamcommunity.com, or help.steampowered.com. You can also enter these links directly instead of clicking on a link sent by someone.
- Steam Support or a delivery service will never ask you for your passwords or Steam Guard codes.
What you need to do now? First, check your email linked to Steam to see if you have received the message as well. If you haven’t received an email but still fear you may be affected or have further questions, you can contact official Steam support.
Steam has also set up a contact point in Germany. You can reach them at: Artana Digital GmbH, Alsterwiete 3, 20099 Hamburg.
Be especially vigilant and check messages from Valve or Steam carefully to see if they really come from the stated senders. According to the current status, you do not need to change your passwords or account information. How to check if your passwords are secure in such a case and what you can do about it, you can find here on MeinMMO.
Your opinion is important to us!
Do you like the article? Then let us know!