Steam Machine Customer Info Possibly Leaked During Cyber Attack

Valve Issues Warning To Steam Machine Customers Following Cyber Attack Published Aug 10, 2026, 9:16 AM EDT Josh Coulson is an editor at TheGamer covering breaking news on everything from colorful platformers to the latest Lego sets. Primarily a news writer since 2018, Josh has covered just about every major game from the past decade. Now an editor, their focus has shifted to being the leading affiliate expert at the site, building relationships between TheGamer and global brands including Mattel, Funko, and The Pokemon Company. Customers who recently bought the Steam Machine and other Valve hardware in Europe have been receiving emails informing them that their data may have been part of a breach. A third-party company that handles shipping for Valve in Europe was the target of a cyber attack two weeks ago, and Valve believes customer information may have been stolen as part of that attack. Steam Hardware Customer Data Leaked Due To Third-Party Data Breach Various reports from people who have purchased hardware from Valve, including the Steam Machine, Steam Controller, and Steam Deck, have been cropping up on Reddit, as highlighted by VGC. Those reports reveal that Valve has sent out an email to potentially affected parties letting them know that CEVA Logistics was subject to a cyber attack between July 29 and August 1, 2026. Valve assures customers that hackers would not have been able to access their payment information. However, among the details listed that may have been taken are names, emails, addresses, phone numbers, and the details of what they ordered from Valve and how much they spent. Hackers Could Use Your Personal Information To Fool You Into Sharing More Valve Even though that means the hackers won't have access to customers' bank accounts, having that much personal information at their disposal means, with not much effort, they could potentially fool people into believing they are Valve employees. The warning email sent out by Valve specifically warns customers to be on the lookout for emails, text messages, and maybe even phone calls in which someone from the studio is attempting to get information out of them, and uses the personal info they already have to fool you into believing they aren't scammers. "They may quote your address back to you to prove they’re genuine. They may ask you to confirm a delivery, pay a small customs or redelivery fee, or sign in somewhere to ‘verify’ your order. Treat all of them as fake. You do not need to change your Steam password, and you don’t need to do anything to your account settings," part of the email reads. Custom image created by James Lucas using assets from Valve and Adobe Stock. The silver lining is that those with the stolen customer details can't do much with it, as it stands. It's what those details might enable them to do that's the issue. If someone claiming to be from Valve, or the delivery company that brought you your Steam Machine, were to get in touch, quoting your address, delivery date, and even how much you spent down to the exact penny, then some might trust that person is the real deal and provide them with more private information, leading to more troubling repercussions. If you have bought a Steam Machine or any other hardware from Valve recently and you are contacted by someone who is trying to get you to pay a nominal fee for something else, or telling you to change your password, ignore it. It isn't Valve. Date Founded August 24, 1996 CEO Gabe Newell Subsidiaries Campo Santo Headquarters Bellevue, Washington, United States Known For Counter-Strike More to follow...