Valve has warned some European customers that their personal information may have been exposed following a cyberattack against the logistics company responsible for distributing Steam hardware in the region.

The company notified affected users on August 10, explaining that CEVA Logistics, which handles Steam hardware fulfillment across Europe, suffered a cyberattack between July 29 and August 1. CEVA reportedly informed Valve about the incident on August 7.

The potentially compromised information includes customers' real names, postal addresses, countries, phone numbers, and email addresses. Valve emphasized, however, that sensitive Steam account information was not exposed. Passwords, payment details, and other Steam account credentials were not accessible to CEVA through the affected systems.

Valve says European customers who purchased Steam hardware within 90 days of the cyberattack should receive an email if they may have been affected.

The company is particularly concerned that the leaked information could be used to target customers with convincing-looking scams. Valve warned users to be cautious of emails, text messages, or phone calls claiming to come from Steam, Valve, or its partners and referencing their recent hardware orders.

According to Valve, scammers may attempt to convince customers that they need to pay an additional fee or visit a website to verify their order. The company says these messages should be treated as fraudulent.

It remains unclear exactly how many European Steam customers were affected by the breach.The incident comes as Valve continues expanding its hardware business. The Steam Deck remains a major part of the company's hardware strategy, while demand for the upcoming Steam Machine has reportedly remained strong despite rising component costs caused by the ongoing RAM shortage.

Valve has previously warned that worsening memory supply issues could push the Steam Machine's price even higher. The cheapest model currently costs $1,049, already making it $150 more expensive than a PlayStation 5 Pro.

The CEVA incident also adds to a growing list of gaming-related cybersecurity concerns. In May 2026, several PlayStation Network accounts were reportedly compromised despite users not falling victim to traditional phishing attempts.

For Steam hardware customers, the immediate priority is to remain vigilant. Anyone who receives an unexpected message concerning a Steam order should avoid clicking links, providing personal information, or making payments until the communication has been independently verified.