Valve alerts Steam Machine and Controller users to potential scam emails following data breach.

Another day, another cyberattack leading to the theft of sensitive user data. This morning, Valve alerted Steam Machine and Steam Controller users that their personal information might have been compromised due to a cyberattack on a shipping partner, CEVA Logistics. This partner is responsible for shipping Steam hardware in Europe and notified Valve on August 7 about the incident.

Fortunately, it appears that payment details and passwords were not part of the breach. However, the hackers did manage to obtain customer names, addresses, countries, phone numbers, Steam email addresses, and details regarding Steam hardware purchases.

In their communication, Valve advised users to be vigilant: “Expect fake messages—email, SMS, or phone—that reference your hardware order and seem to come from Steam, Valve, or a delivery service. They may even quote your address to appear legitimate. These messages might ask you to confirm a delivery, pay a small customs or redelivery fee, or log in somewhere to ‘verify’ your order. Treat all of them as fraudulent.”

Valve emphasized that Steam Support never reaches out to users via email, Steam Chat, or Discord, and only addresses account issues through its help page. They urged users to refrain from clicking on login links and confirmed that neither Steam Support nor delivery services will ever request passwords or Steam Guard codes.

Sadly, data leaks and online scams have become all too common in today’s digital landscape. Research from a cybersecurity firm indicates that numerous scams are currently targeting the highly anticipated game, Grand Theft Auto 6. They discovered websites offering fake beta keys for PC and Android, along with phishing attempts aimed at Rockstar Social Club accounts. Earlier this year, Rockstar Games experienced a breach where internal company data was stolen, though user account information remained secure. This followed a more severe hack in 2023 that resulted in early footage and assets of GTA 6 being leaked. Other notable incidents include a data leak from GameFreak in 2024 and a significant ransomware attack on Insomniac in 2023.

Last year, it was reported that information from 89 million Steam users had been exposed, but Valve clarified that the data consisted of older encrypted SMS authentication messages that did not contain sensitive information.