Valve has confirmed that personal data of some of its European customers was exposed in a cyberattack. The breach occurred between July 29 and August 1, affecting CEVA Logistics, which ships Steam hardware products. Valve learned of the breach on August 7 and stated that some personal information, including names, addresses, phone numbers, emails, and order details, was likely compromised.

The company clarified that payment info, passwords, and Steam Guard codes were not affected. Valve advised customers not to change their passwords and warned them to expect fake messages that may impersonate Steam or delivery companies to trick them into paying fees or verifying orders.