--- title: Valve is warning Steam Machine buyers that scammers have... description: Valve has warned European customers who ordered a Steam Machine or Steam Controller that their delivery details were exposed in a cyberattack on CEVA... canonical: https://daily.dev/posts/valve-is-warning-steam-machine-buyers-that-scammers-have-their-address-dvvl1gpju twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Valve is warning Steam Machine buyers that scammers have their address | daily.dev og:description: Valve has warned European customers who ordered a Steam Machine or Steam Controller that their delivery details were exposed in a cyberattack on CEVA... og:url: https://daily.dev/posts/valve-is-warning-steam-machine-buyers-that-scammers-have-their-address-dvvl1gpju og:image: https://api.daily.dev/og/posts/dvvl1gPJU.png og:image:alt: Valve is warning Steam Machine buyers that scammers have their address og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Valve is warning Steam Machine buyers that scammers have their address **[The Next Web](https://daily.dev/sources/tnw)** · 5 min read · 0 upvotes · 0 comments ## Summary Valve has warned European customers who ordered a Steam Machine or Steam Controller that their delivery details were exposed in a cyberattack on CEVA Logistics, the contractor that ships Valve hardware across Europe. The breach, which occurred between July 29 and August 1, exposed names, addresses, phone numbers, email addresses, product types, and prices paid — but not passwords, payment details, or Steam Guard codes. Valve is urging affected customers to treat any incoming messages about their order as fake, noting scammers may quote real addresses to appear legitimate. CEVA, which runs over 1,000 warehouses and handles ~15 million shipments annually, also affected Dutch retailers Bol and De Bijenkorf, bank ING, eyewear firm Ace & Tate, and football club Ajax. The incident highlights the risk of supply chain attacks through third-party logistics providers. The total number of affected customers and the attack vector remain unknown. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What data was exposed in the CEVA Logistics breach affecting Steam customers? The CEVA Logistics breach exposed names, countries, street addresses, phone numbers, email addresses, product types, and prices paid for Steam Machine and Steam Controller orders. Payment details, passwords, and Steam Guard codes were not exposed — CEVA never had access to them. Shipping data was retained by CEVA for 90 days after each order, which determined who was affected. _Teams managing third-party data exposure incidents like this one track emerging details on daily.dev._ ### How should Steam customers respond to suspicious messages after the CEVA breach? Valve instructs affected customers to treat all incoming messages about their order as fake, whether by email, text, or phone, even if the message quotes their real address. Steam support only handles issues through its official help page — never via email, Steam chat, or Discord. No password or Steam Guard code should ever be provided, and no action on Steam accounts is required since the breach did not reach them. _Developers building customer-facing security notices can follow real-world incident response examples on daily.dev._ ## Similar posts on daily.dev - [Pokémon Center data breach exposes customer info, cancels some orders](https://daily.dev/posts/pok-mon-center-data-breach-exposes-customer-info-cancels-some-orders-rv6yhmpez) · BleepingComputer · 0 upvotes · 0 comments - [US cargo tech company publicly exposed its shipping systems and customer data to the web](https://daily.dev/posts/us-cargo-tech-company-publicly-exposed-its-shipping-systems-and-customer-data-to-the-web-fusdwhii0) · TechCrunch · 0 upvotes · 0 comments - [Indie devs and publishers hit in Gamescom equipment thefts](https://daily.dev/posts/indie-devs-and-publishers-hit-in-gamescom-equipment-thefts-w2ormrq3x) · Game Developer · 0 upvotes · 0 comments --- Tags: [#cyber](https://daily.dev/tags/cyber), [#phishing](https://daily.dev/tags/phishing), [#data-breach](https://daily.dev/tags/data-breach) [View this post on daily.dev](https://daily.dev/posts/valve-is-warning-steam-machine-buyers-that-scammers-have-their-address-dvvl1gpju) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Valve is warning Steam Machine buyers that scammers have their address","url":"https://daily.dev/posts/valve-is-warning-steam-machine-buyers-that-scammers-have-their-address-dvvl1gpju","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/valve-is-warning-steam-machine-buyers-that-scammers-have-their-address-dvvl1gpju"},"datePublished":"2026-08-10T20:45:05.640Z","dateModified":"2026-08-10T20:46:01.484Z","description":"Valve has warned European customers who ordered a Steam Machine or Steam Controller that their delivery details were exposed in a cyberattack on CEVA...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/5fa91b982cfe241dab602be03bddd2f2?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/5fa91b982cfe241dab602be03bddd2f2?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"The Next Web","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"The Next Web","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/tnw","url":"https://daily.dev/sources/tnw"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/valve-is-warning-steam-machine-buyers-that-scammers-have-their-address-dvvl1gpju","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"cyber,phishing,data-breach","timeRequired":"PT5M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"The Next Web","item":"https://daily.dev/sources/tnw"},{"@type":"ListItem","position":3,"name":"Valve is warning Steam Machine buyers that scammers have their address"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/valve-is-warning-steam-machine-buyers-that-scammers-have-their-address-dvvl1gpju#faq","mainEntity":[{"@type":"Question","name":"What data was exposed in the CEVA Logistics breach affecting Steam customers?","acceptedAnswer":{"@type":"Answer","text":"The CEVA Logistics breach exposed names, countries, street addresses, phone numbers, email addresses, product types, and prices paid for Steam Machine and Steam Controller orders. Payment details, passwords, and Steam Guard codes were not exposed — CEVA never had access to them. Shipping data was retained by CEVA for 90 days after each order, which determined who was affected. Teams managing third-party data exposure incidents like this one track emerging details on daily.dev."}},{"@type":"Question","name":"How should Steam customers respond to suspicious messages after the CEVA breach?","acceptedAnswer":{"@type":"Answer","text":"Valve instructs affected customers to treat all incoming messages about their order as fake, whether by email, text, or phone, even if the message quotes their real address. Steam support only handles issues through its official help page — never via email, Steam chat, or Discord. No password or Steam Guard code should ever be provided, and no action on Steam accounts is required since the breach did not reach them. Developers building customer-facing security notices can follow real-world incident response examples on daily.dev."}}]} ```