"Expect fake messages": A load of Steam user personal info has been stolen thanks to a cyberattack on one of Valve's partners, claims report

Seemingly, lone Europeans are affected

If you unrecorded successful Europe and person bought hardware from Steam successful the past 3 months, past ticker out, your idiosyncratic accusation mightiness person been stolen acknowledgment to a cyberattack connected 1 of Valve's shipping partners.

"Between July 29 2026 and August 1, 2026, a cyberattack deed CEVA Logistics, the institution that ships Steam hardware to customers successful Europe," reads a Valve email published by Gaming On Linux's Liam Squires-Hand, which has besides been shared separately by Reddit users. "CEVA is inactive investigating this attack, but arsenic Valve learned connected August 7, definite accusation astir Steam customers, including you, was apt compromised." CEVA person seemingly "isolated the affected systems, taken each offline and brought successful extracurricular investigators".

According to the email, CEVA obtains transportation info from Valve, including your name, telephone number, email, and postal address, erstwhile shipping Steam hardware to radical successful Europe. CEVA clasp that info for up to 90 days aft order. If you've been mailed astir this by Valve, it doesn't mean your information has decidedly been pinched: the email notes that Valve person decided to interaction anybody "we tin presume were impacted".

Seemingly, you don't request to interest astir recognition paper accusation oregon nuking your Steam logins, arsenic "CEVA does not person entree to your outgo information, passwords, Steam Guard codes oregon different information".

If you person fallen unfortunate to the CEVA hack, you tin look guardant to a clump of spam. "Expect fake messages - email, SMS oregon telephone - that notation your hardware bid and look to travel from Steam, Valve oregon a transportation company," the email reads. "They whitethorn punctuation your code backmost to you to beryllium they're genuine. They whitethorn inquire you to corroborate a delivery, wage a tiny customs oregon redelivery fee, oregon motion successful determination to 'verify' your order. Treat each of them arsenic fake."

The email notes that Steam Support ne'er grip issues implicit email, Steam chat oregon Discord, truthful don't judge anybody who tries to hustle you connected there. Also, don't click immoderate links you get successful fishy emails – benignant successful the Steam store code yourself. And don't springiness anybody your password oregon Steam Guard code. All beauteous modular information malarkey.

The email promises that Valve are "pressing CEVA for the afloat scope of what was taken and how, and we are successful the process of notifying the information extortion authorities successful the countries affected, including yours."

It seems unlikely, but not intolerable that the email itself is simply a truly tortured bluff connected the portion of immoderate wily cyberburglars, designed to instrumentality you into lowering your defender somehow. One tin ne'er beryllium excessively careful, and I person duly sent Valve a petition for clarification via channels I trust. I wrote each of it successful superior letters to marque definite they instrumentality maine seriously. Whatever the information of the matter, nary of this is going to assistance merchantability Steam Machines.