Data Breach
Valve warns European Steam buyers: scammers may quote your address
Valve warns European Steam hardware buyers to expect phishing after a breach at shipping partner CEVA Logistics likely exposed names, addresses, phone numbers, and emails. Fake messages may quote your real address to sound genuine.
Emmanuel Fabrice Omgbwa Yasse AI-assisted
2026-08-14 · 1 min read
Valve tells European Steam buyers to treat delivery messages as fake: a breach at CEVA Logistics, its shipping partner, likely exposed names, addresses, phone numbers, and emails.
The breach ran July 29 to August 1, weeks after Steam Machine and Steam Controller reservations opened. CEVA stores delivery data up to 90 days; Valve says customer data "was likely compromised."
In an email, Valve warns that fake messages may quote your address to sound real, then ask you to confirm a delivery, pay a customs fee, or sign in to "verify" an order. Treat all of them as fake: it's the playbook behind AI-powered phishing and Teams vishing. Valve handles account issues only at help.steampowered.com and never contacts users by email, Steam chat, or Discord.
Steam account data is unaffected: CEVA has no payment info, passwords, or Steam Guard codes.
Get the tech essentials in 3 minutes every morning
One email, every weekday, with what actually matters in AI and tech.