Steam customers in Europe who have bought hardware have ‘likely’ had their data compromised, as Valve warns people to stay vigilant of fake messages.
Valve’s Steam Machine has already had a turbulent run-up to launch, thanks to the memory crisis, but now the company is facing another issue.
Earlier today, customers in Europe who have purchased Steam hardware were sent an email from Valve, notifying them that the company who ships their hardware, CEVA Logistics, had been targeted by a cyberattack between July 29 and August 1, 2026.
As highlighted in the email (via Reddit), an investigation into the attack is still underway, but it warned that ‘information about Steam customers’ was ‘likely compromised’.
Valve lists the potentially compromised data, and while it doesn’t include passwords or payment details, it encompasses names, street addresses, your country, phone number, email address, and details of your ordered product.
‘Additional information related to your Steam account or other purchases was not impacted,’ Valve states. ‘CEVA does not have access to your payment information, passwords, Steam Guard codes or other information.’
Expert, exclusive gaming analysis
Sign up to the GameCentral newsletter for a unique take on the week in gaming, alongside the latest reviews and more. Delivered to your inbox every Saturday morning.
If you have been affected (you should have received the same email if you have), Valve says to ‘expect fake messages’ through email, text, or phone, that ‘mention your hardware order and appear to come from Steam, Valve, or a delivery company’.
‘They may quote your address back to you to prove they’re genuine,’ it reads. ‘They may ask you to confirm a delivery, pay a small customs or redelivery fee, or sign in somewhere to ‘verify’ your order. Treat all of them as fake.’
Valve states it’s ‘pressing CEVA for the full scope of what was taken and how’, with the company in the process of notifying data protection authorities in affected countries.
Over the past few months, Valve has been shipping Steam Machines to people who managed to bag one in the pre-order lottery. It also has been sending out Steam Controllers since May, but you might have to wait until next year if you reserve one today.
Last year, Valve was seemingly hit by a Steam data leak, but the company said reports of the breach were overblown, and only related to old text messages.
Email gamecentral@metro.co.uk, leave a comment below, follow us on Twitter.
To submit Inbox letters and Reader’s Features more easily, without the need to send an email, just use our Submit Stuff page here.
For more stories like this, check our Gaming page.