Valve’s hardware partner in Europe warned Steam hardware customers that it was hacked and customer personal information was leaked.
Reports say Steam Machine and Steam Controller customers received a message from Valve warning them that their personal information had been leaked as a result of a hacker attack on logistics partner CEVA Logistics.
CEVA notified Valve of the attack on August 7. Valve said today that the compromised data doesn’t include payment information or passwords, but it could include customers’ names, addresses, phone numbers, Steam account email addresses and Steam Machine and Steam Controller purchase details.
Valve worries that hackers could further use this data to trick customers into thinking they’re deal with Valve’s support but in fact could be using the data for further attacks. Valve noted they may ask individual customers to confirm a delivery, pay a customs fee, a redelivery fee, or sign an order. Valve said all such queries should be treated as fake.
Valve says that it is “pressing CEVA for the full scope of what was taken and how, and we are in the process of notifying the data protection authorities in the countries affected, including yours. CEVA has isolated the affected systems, taken all offline and brought in outside investigators.”
Valve said that the cyberattack took place against CEVA between July 29, 2026, and August 1, 2026. CEVA is still investigating the attack but it told Valve that the data was likely leaked.
Valve said you do not need to change your Steam password, and you don’t need to change account settings. Valve said those affected can write to Artana Digital GmbH, Alstertwiete 3, 20099 Hamburg, Germany.