Steam Hardware Shipper Data Breach Exposes Customer Information: Names and Addresses Leaked

Valve has issued a warning to customers in Europe who ordered its Steam hardware, stating that a recent data breach may have exposed their personal information. The breach, which occurred at Valve’s European shipping partner, CEVA Logistics, potentially compromised customer names, addresses, phone numbers, and email addresses.

The incident at CEVA took place between July 29th and August 1st, following the commencement of reservations for Valve’s new Steam Machine and Steam Controller. Valve suspects that European customer data may have been compromised as CEVA retains “delivery-related information” for up to 90 days post-order.

In response to the breach, Valve cautions customers to be wary of suspicious messages via email, text, or phone claiming to be from Steam, Valve, or a delivery company. These messages may attempt to appear legitimate by citing the recipient’s address and could request confirmation of deliveries, payment for customs fees, or account verification. Valve advises recipients to treat such messages as fraudulent.

The notice assures users that additional data associated with their Steam accounts or purchases remains unaffected by the breach. CEVA does not have access to payment details, passwords, Steam Guard codes, or similar sensitive information. Valve emphasizes that account-related queries should only be addressed through help.steampowered.com, and users should be cautious of unsolicited contact via email, Steam chat, or Discord.