VALVE has warned European Steam hardware buyers about potential fake delivery scams following a cyberattack on CEVA Logistics, its shipping partner. Personal information, including names, addresses, and email addresses associated with hardware orders, was exposed between July 29 and August 1, 2026. Although no payment details were compromised, affected customers are advised to be cautious of unsolicited communications referencing their orders.
Valve's prior data breaches and the reuse of such data in scams highlight the ongoing risks. Customers are recommended to use unique passwords and enable two-factor authentication.