PSA: Steam Machine and Steam Controller Customers in Europe Hit by Cyber Attack

Valve has issued notifications to customers who purchased specific Steam hardware, specifically those who bought the Steam Machine and the Steam Controller in Europe. This action follows a reported cyberattack targeting CEVA Logistics, a company responsible for shipping Valve's hardware products. According to coverage from Windows Central and BleepingComputer, the breach occurred at the logistics provider rather than within Valve's own internal systems. The primary focus of the incident involves the unauthorized access to customer information stored by the shipping partner, which has prompted the official warnings sent to the affected user base. Multiple technology outlets, including The Verge, Digital Foundry, and Mein-MMO, are highlighting the specific types of data that may have been compromised during this security event. The Verge reports that the leaked customer data includes names and addresses.

BleepingComputer and Windows Central emphasize that Valve is the entity notifying these hardware customers about the breach at CEVA Logistics. The coverage across these sources suggests a concerted effort to inform users who utilized these specific legacy hardware products in the European region about the potential exposure of their personal shipping details. To understand the context of this event, it is necessary to note that the affected users are those who purchased the Steam Machine and Steam Controller. These hardware devices were distributed using the services of CEVA Logistics for shipments within Europe. The breach is centered on the logistics side of the supply chain, meaning the data leaked was likely information required for the physical delivery of these products. Because this involves a third-party shipper, the vulnerability existed at the point of logistics management rather than the primary storefront or account system managed by Valve.

Future developments will likely center on the extent of the data leak and any further instructions Valve provides to its customers. While the current reports from Digital Foundry and Mein-MMO focus on the immediate PSA for European customers, it remains to be seen if other regions or hardware products were involved. Users are currently being told what they need to know regarding the breach at CEVA Logistics, and further updates will depend on the findings of the investigation into the cyberattack. The primary concern for affected users remains the security of their leaked names and residential addresses.