A data breach at shipping giant Ceva Logistics is rippling across banks, retailers, Steam gamers, and beyond | TechCrunch

French logistics and transport giant Ceva Logistics has experienced a significant cyberattack that disrupted European shipping operations and compromised the personal details of numerous customers.

The security breach, which commenced in late July, has impacted at least eight warehouses across the continent, causing shipping delays and forcing some retail partners to cancel orders. During the incident, unauthorized actors managed to infiltrate Ceva's systems and harvest delivery information. The exposed data consists of personal contact information, including full names, residential delivery addresses, phone numbers, and email addresses provided by retail consumers during their purchases.

The consequences of this intrusion have reverberated across multiple industries, affecting clients ranging from financial services to retail and entertainment. Prominent organizations, such as Dutch e-commerce platform Bol, luxury retailer De Bijenkorf, banking group ING, and gaming company Valve—specifically affecting customers who bought Steam hardware—have acknowledged that their users' shipping data was compromised. In response to the incident, Ceva activated its cybersecurity protocols, initiated an internal investigation, and reported that some of its affected systems are returning online. Meanwhile, government watchdogs, including the Dutch data protection authority, are actively investigating the situation following formal breach notifications from multiple impacted businesses.