Steam Customer Data Exposed in CEVA Logistics Cyberattack

**Executive summary:** A cyberattack on CEVA Logistics between July 29 and August 1, 2026, likely exposed some Steam customers' names, postal addresses, telephone numbers, Steam-linked email addresses, and hardware order details (type and price); Valve and CEVA say Steam passwords, Steam Guard codes, and payment information were not stored by CEVA. Affected customers were notified, CEVA isolated systems and engaged investigators, and the report warns of increased risk of targeted phishing, delivery fraud, and impersonation; an attribution to the CoinbaseCartel is discussed but unconfirmed.