Valve warns European Steam hardware buyers of data breach at logistics partner

Valve disclosed that its European shipping provider, CEVA Logistics, suffered a breach that may have exposed customers' names, addresses, phone numbers and email addresses.

Valve announced that CEVA Logistics, the firm handling European shipments of Steam hardware, experienced a security incident between July 29 and August 1. The intrusion may have revealed personal details such as names, mailing addresses, telephone numbers and email addresses of customers who ordered Steam devices in Europe. CEVA retains delivery-related information for up to 90 days, which is why the data was vulnerable, though the breach did not reach payment data, passwords, Steam Guard codes or other account specifics.

Valve cautions users that scammers may now send emails, texts or phone calls pretending to be from Steam, Valve or a courier, often quoting the victim's address to appear legitimate, and may request small fees or verification links. All such communications should be considered fake. Official assistance is limited to the help.steampowered.com portal, and Valve will not reach out through email, Steam chat or Discord.