Story perspectives

CEVA Hack Exposes Steam Buyer Data in Europe, UK

8/11/2026

Summary

Story summary

CEVA Logistics, Valve’s European hardware fulfillment partner, was cyber-attacked July 29–August 1 2026, likely exposing data of Steam hardware buyers in Europe and the United Kingdom.
The breach revealed names, shipping addresses, phone numbers, emails linked to Steam accounts, and itemized orders with prices such as a €569 Steam Deck OLED.
Valve said payment data were untouched, emailed customers on August 10 2026, and warned scammers may use stolen details for phishing or smishing.

History

Historical Context

In May–July 2017 hackers exploited an unpatched Equifax web server, stealing personal data of about 145.5 million Americans, a breach Equifax disclosed on September 7 2017. The incident followed a decade of large breaches—including JPMorgan Chase in 2014 and Target in 2013 that exposed tens of millions of records—and spurred a $700 million settlement with the FTC, CFPB and states, accelerating stricter U.S. privacy legislation.

1 of 2

Story summary

CEVA Logistics, Valve’s European hardware fulfillment partner, was cyber-attacked July 29–August 1 2026, likely exposing data of Steam hardware buyers in Europe and the United Kingdom.
The breach revealed names, shipping addresses, phone numbers, emails linked to Steam accounts, and itemized orders with prices such as a €569 Steam Deck OLED.
Valve said payment data were untouched, emailed customers on August 10 2026, and warned scammers may use stolen details for phishing or smishing.

1 / 2