Valve confirmed that the breach was contained within its third-party shipping partner’s systems. While internal Steam account credentials, passwords, and payment information remain secure, the exposed delivery data provides attackers with enough specific context to craft convincing fraudulent messages. These bad actors may cite genuine shipping addresses to solicit customs fees or pressure users into clicking malicious verification links.
Valve confirms European customer data leak via logistics partner
Customers who ordered Steam hardware in Europe face a heightened risk of phishing attacks after a data breach at CEVA Logistics. The incident, occurring between July 29 and August 1, compromised sensitive delivery records, exposing names, physical addresses, phone numbers, and email accounts of users awaiting their Steam Machines and controllers.
Valve issued a strict warning for users to disregard any unsolicited communication claiming to be from the company or its shipping affiliates. The developer maintains that it handles all account-related support exclusively through its official portal, help.steampowered.com, and will never reach out via Discord, Steam chat, or direct email requests for payment or login credentials.
Comments (0)
No comments yet. Be the first!