- Earlier today, Steam Machines and Steam Controllers in the EU were hit by a cyberattack on CEVA Logistics.
- Valve is currently working with its European logistics partner to get to the bottom of the incident.
- In the meantime, Valve advises European users to ignore any suspicious emails, SMS messages, or phone calls that “appear to come from Steam.”
Steam’s hardware partner in the EU has been hacked, specifically affecting Steam Machine and Steam Controller users. Earlier today, August 10, 2026, attackers targeted CEVA Logistics, Valve’s European logistics partner for hardware, including Steam Machines and Steam Controllers, and exposed sensitive information.
Valve Warns Affected EU Steam Hardware Users in Warning Email
According to emails sent to customers shared in a Reddit thread, Valve has warned that the cyberattack may have compromised the personal information of users on Steam hardware in the EU. However, they have confirmed that the attackers did not gain access to payment information or passwords.
In the email, Valve said, “Between July 29, 2026, and August 1, 2026, a cyberattack hit CEVA Logistics, the company that ships Steam hardware to customers in Europe. CEVA is still investigating this attack, but as Valve learned on August 7, certain information about Steam customers, including you, was likely compromised.”
As per Valve’s email about the CEVA Logistics hack in the EU affecting Steam hardware, here’s what the compromised information for each user actually includes:
- Name
- Street address, postal code, and city
- Country
- Phone number
- Email address — the same one your Steam account uses
- Type and price of ordered product
With this information, cyberattackers could target European Steam Machine and Steam Controller users with phishing scams, or impersonation attempts to obtain additional personal information.
In response, Valve says to “expect fake messages – email, SMS or phone – that mention your hardware order and appear to come from Steam, Valve or a delivery company. They may quote your address back to you to prove they’re genuine. They may ask you to confirm a delivery, pay a small customs or redelivery fee, or sign in somewhere to “verify” your order. Treat all of them as fake.”
In addition, Valve is pressing CEVA Logistics about the Steam hardware cyberattack in the EU “for the full scope of what was taken and how”. They are also in the process of “notifying the data protection authorities in the countries affected“.
CEVA Logistics has also isolated the affected Steam Machine and Steam Controller systems, taken them offline, and brought in external investigators to identify who’s responsible for the Steam hardware hack in the EU.
If you’re based in Europe and own Steam hardware, or have reserved a Steam Machine or a Steam Controller, visit Steam Support at help.steampowered.com to secure your Steam account and receive additional help.
Users should also hold off on gifting games to their friends on Steam until Valve resolves the issue. Additionally, Valve recommends manually entering Steam’s official login address rather than clicking links sent by others, and ignoring texts from Steam Chat, Discord, or other platforms for now.
