Valve has begun notifying customers who purchased Steam hardware in Europe over the past 90 days about a personal data breach that may have compromised their information. The company stated that names, addresses, phone numbers, and email addresses of affected individuals were likely exposed. Passwords and payment details are not believed to be at risk.
The breach is believed to have originated from CEVA Logistics, a European distribution firm used by Valve. Hackers reportedly gained access to systems holding "specific delivery-related information from Steam" shared with CEVA, which Valve indicated was the data likely taken. Valve is currently pressing CEVA for more details and has notified data protection authorities.
Valve is urging customers to be vigilant for fraudulent communications. The company cautioned that fake messages, including emails, SMS, or phone calls, may appear to originate from Steam, Valve, or delivery companies. These scams could attempt to solicit order verifications, demand payment for customs or redelivery fees, or prompt users to sign in to "verify" their order. Customers are advised to treat all such communications as fake.
There is no need for customers to change their Steam passwords or alter any other account settings as a result of this incident. This news follows recent reports indicating a significant drop in Steam Deck sales following price increases, with some analysis suggesting its current price point makes it less competitive against rivals like the Xbox Ally or Lenovo Legion Go.