Steam Machine Customer Info Potentially Leaked Via Data Breach
Valve Issues Warning To Steam Machine Customers Following Cyber Attack
Customers who recently bought the Steam Machine and other Valve hardware in Europe have been receiving emails informing them that their data may have been part of a breach. A third-party company that handles shipping for Valve in Europe was the target of a cyber attack two weeks ago, and Valve believes customer information may have been stolen as part of that attack.
Steam Hardware Customer Data Leaked Due To Third-Party Data Breach
Various reports from people who have purchased hardware from Valve, including the Steam Machine, Steam Controller, and Steam Deck, have been cropping up on Reddit, as highlighted by VGC. Those reports reveal that Valve has sent out an email to potentially affected parties letting them know that CEVA Logistics was subject to a cyber attack between July 29 and August 1, 2026.
Valve assures customers that hackers would not have been able to access their payment information. However, among the details listed that may have been taken are names, emails, addresses, phone numbers, and the details of what they ordered from Valve and how much they spent.
Even though that means the hackers won't have access to customers' bank accounts, having that much personal information at their disposal means, with not much effort, they could potentially fool people into believing they are Valve employees. The warning email sent out by Valve specifically warns customers to be on the lookout for emails, text messages, and maybe even phone calls in which someone from the studio is attempting to get information out of them, and uses the personal info they already have to fool you into believing they aren't scammers.
"They may quote your address back to you to prove they’re genuine. They may ask you to confirm a delivery, pay a small customs or redelivery fee, or sign in somewhere to ‘verify’ your order. Treat all of them as fake. You do not need to change your Steam password, and you don’t need to do anything to your account settings," part of the email reads.
More to follow...