Circuit Wire — a daily news update from the Circuit.
Hackers had access to Ceva Logistics servers between July 29 and August 1, exposing shipping data tied to customers of Valve's Steam hardware, Dutch retailers Bol and De Bijenkorf, football club Ajax, bank ING, and eyewear maker Ace & Tate, the France-headquartered logistics giant confirmed this week.
Ceva operates roughly 1,000 warehouses worldwide and reported $18.3 billion in revenue last year as a subsidiary of shipping group CMA CGM. The company said the operational impact is limited to eight of its European warehouses and that all other operations continue without incident.
Valve, the publisher behind Steam, said it learned of the breach on August 7 and began notifying European customers who bought Steam hardware such as the Steam Deck, Steam Machine, and Steam Controller. The stolen data includes names, home addresses, phone numbers, email addresses, and the type and price of hardware ordered, information Ceva retains for up to 90 days after a delivery.
Valve said no Steam account credentials, passwords, Steam Guard codes, or payment information were exposed, since Ceva never had access to that data. The company warned affected customers to expect phishing attempts by email, text, or phone that quote real order details to appear credible, and said recipients do not need to change their Steam password or account settings.
Dutch retailer Bol and luxury retailer De Bijenkorf both told customers to expect delivery delays and possible data exposure. Ajax, ING, and Ace & Tate also reported that shipping information tied to their customers was affected, according to Dutch broadcaster NOS. Authorities in the Netherlands are investigating, and Ceva said it is working with outside investigators after isolating the affected systems.
Shipping and logistics firms have become a growing target for cybercriminals seeking delivery data that can be used for scams, or in some cases to identify and intercept physical shipments in transit.
Want a weekly roundup of the major stories shaping the security industry? The On The Circuit newsletter is read by more than 12,000 protection professionals.
Spotted something we should cover? Send tips and feedback via circuit-magazine.com.