Another day, another cyberattack that resulted in users’ sensitive data being stolen by malicious actors. This morning, Valve issued a warning to Steam Machine and Steam Controller customers that their personal data may have been stolen following a cyberattack on a shipping partner, CEVA Logistics. The partner handles Steam hardware shipping in Europe and informed Valve on Aug. 7 that it had been hit with an attack.
Thankfully, it seems that payment information and passwords weren’t leaked as part of the breach. However, the hackers did make off with customer names, addresses, countries, phone numbers, Steam email addresses, and Steam hardware purchase details.
As for what to look out for, the Valve email said: “Expect fake messages – email, SMS or phone – that mention your hardware order and appear to come from Steam, Valve or a delivery company. They may quote your address back to you to prove they’re genuine. They may ask you to confirm a delivery, pay a small customs or redelivery fee, or sign in somewhere to ‘verify’ your order. Treat all of them as fake.”
The company clarified that Steam Support never contacts users through email, Steam Chat, or Discord, and only handles account problems through its help page. They encouraged users to avoid clicking on login links and confirmed that Steam Support and couriers will never ask for passwords or a Steam Guard code.
Unfortunately, data leaks and digital scams have become relatively commonplace on the modern internet. According to NordVPN’s Threat Intelligence research unit, there are many ongoing scams around 2026’s biggest game, Grand Theft Auto 6. They found websites promising fake beta keys on PC and Android, as well as phishing attempts targeted at Rockstar Social Club accounts. Rockstar Games was breached earlier this year, with the hackers stealing internal company data rather than user account information. Previously, the company was hit with a far more serious hack in 2023 that resulted in early GTA 6 footage and assets being leaked. Other recent hacks include a GameFreak data leak in 2024 and a major Insomniac ransomware attack in 2023.
Last year, there was a report that 89 million Steam users’ information had been exposed, but Valve confirmed that the data consisted of older encrypted SMS authentication messages that lacked sensitive details.