Valve Warns Steam Machine Patrons About Rip-off Messages After Cyberattack

If you’ve been holding out on shopping for Valve’s ludicrously costly dwelling console, you might have saved your self from greater than an empty pockets. European clients who ordered a Steam Machine or Steam Controller stands out as the victims of a private data information breach after one in all Valve’s {hardware} distribution companions was hit by a cyberattack.

CEVA Logistics, the corporate that helps set up Valve’s European provide chain, knowledgeable its associate of the information breach on Aug. 7. A Valve spokesperson advised CNET that the corporate spent the weekend assembling a listing of at-risk clients, notifying them in regards to the assault via email on Monday morning.

“Though CEVA is still investigating the attack, we wanted to at least send out messaging to all customers we can assume were affected based on what we currently know,” the spokesperson stated.

What Valve at present is aware of is that the private data revealed by the cyberattack is probably going all delivery-related. CEVA advised Valve that the breach revealed clients’ names, international locations, road addresses, telephone numbers and electronic mail addresses. According to Valve, “payment information, passwords and Steam Guard codes” are all protected, since CEVA doesn’t have entry to this information.

Because telephone numbers and electronic mail addresses linked to Steam accounts are brazenly circulating, Valve warned in opposition to phishing assaults that could be searching for extra private data within the coming days.

Read extra: Best Data Removal Services of 2026: Reduce Your Online Presence

“Expect fake messages – email, SMS or phone – that mention your hardware order and appear to come from Steam, Valve or a delivery company,” Valve wrote in its electronic mail to affected clients. “They may quote your address back to you to prove they’re genuine. They may ask you to confirm a delivery, pay a small customs or redelivery fee or sign in somewhere to ‘verify’ your order. Treat all of them as fake.”

Valve reminded clients that Steam’s help workforce solely handles points on the official assist web page and by no means sends messages over Steam chat or by third-party companies. Company workers may also by no means ask for a buyer’s password or Steam Guard codes.

The finer particulars of the assault at present stay unclear, as there’s no official data out there on what number of clients have been affected, how a lot information was stolen or how the cyberattack infiltrated CEVA Logistics’ programs. In its assertion, Valve stated it’s “pressing CEVA for the full scope” of the breach.

Alongside CEVA’s inner investigation, authorities within the Netherlands are trying into the assault. A spokesperson for the Dutch information safety authority told TechCrunch that the company has obtained information breach stories from a minimum of 10 corporations in relation to the hack.

In addition to the information breach, FreightWaves reported operations at eight of the corporate’s warehouses have been affected by the cyberattack, inflicting potential delays or cancellations to buyer orders within the coming days.

CEVA Logistics didn’t instantly reply to a request for remark.