Ceva Logistics breach hits banks, retailers, Steam users
Original: A data breach at shipping giant Ceva Logistics is rippling across banks, retailers, Steam gamers, and beyond
Why This Matters
The breach highlights growing cybercriminal targeting of major logistics providers and their downstream data exposure across industries.
Shipping giant Ceva Logistics suffered a cyberattack starting July 29, impacting at least 8 European warehouses. Customer data — names, addresses, phone numbers, emails — was stolen, affecting Bol, De Bijenkorf, ING, Ajax, Ace & Tate, and Valve's Steam hardware buyers.
France-headquartered Ceva Logistics, which recorded $18.3 billion in revenue in 2025 and operates over 1,000 warehouses globally, confirmed a cyberattack that began July 29 and is disrupting shipping operations across at least eight European warehouses. The company stated: 'On Aug. 1, CEVA Logistics confirmed to affected customers that a cyber intrusion was impacting part of its European contract logistics operations. As soon as the incident was identified, CEVA's cybersecurity teams immediately activated its security protocols and launched a thorough investigation, which is still ongoing.' Multiple companies relying on Ceva for fulfillment reported that hackers stole their customers' names, home addresses, phone numbers, and email addresses. Dutch retailer Bol warned customers of the data theft and noted expected order delays and cancellations. Luxury retailer De Bijenkorf also confirmed order delays. Banking giant ING, football club Ajax, and eyeglass brand Ace & Tate reported customers' shipping data was affected. Valve confirmed on August 7 that data was taken from Ceva's systems and notified recent Steam hardware buyers; Valve noted Ceva retains shipping information for 90 days post-order. FreightWaves reported the hack is causing widespread shipping delays across affected warehouses.