This week, several internet users were in for an unpleasant surprise when they received an email from Valve. The email was sent to European customers who recently purchased a Steam Machine, Steam Controller, or Steam Deck.

Valve explains that CEVA Logistics, the company responsible for shipping the company’s devices in Europe, was the victim of a cyberattack between July 29 and August 1, 2026. An investigation, which is still ongoing, revealed that customer information "had likely been compromised."

This means that customers’ names, mailing addresses, phone numbers, email addresses associated with their Steam accounts, as well as the type of product ordered and its price, may have been stolen. Those affected may therefore receive fraudulent messages (emails, text messages, or phone calls) from scammers in the coming days.

However, Steam passwords, payment information, and Steam Guard codes were not affected, as Valve does not share this information with CEVA.