Valve: Steam Hardware Buyers' Data Likely Stolen in CEVA Breach

Valve has told recent Steam hardware buyers in Europe that a breach at logistics partner CEVA may have exposed their personal data, and it warns them to treat order-related fake messages as scams. The warning matters because the exposed information could be used to make fraudulent messages appear credible.

Data Breach

Steam Hardware

Valve

Security

Valve has begun notifying recent Steam hardware customers of a personal data breach that may have exposed their name, address, phone number, and email.
The potentially affected purchases are Steam Deck, Steam Machine, or Steam Controller made within Europe in the past 90 days.
Passwords and payment details are not thought to be at risk.
The breach involved CEVA Logistics, Valve’s European distribution firm, which receives delivery-related information from Valve.
Valve tells customers to expect fake email, SMS, or phone messages referencing their hardware order and appearing to come from Steam, Valve, or a delivery company, and to treat them as fake.
The number of affected customers has not been disclosed.