Valve, the company behind the Steam gaming platform, has confirmed that a third-party data breach has impacted its European customers. The breach occurred at CEVA Logistics, a shipping partner responsible for handling deliveries of Steam hardware, including the Steam Machine and Steam Controller. According to Valve, the unauthorized access took place over a four-day window between July 29 and August 1.

In an official communication sent to affected users, Valve stated that the compromised data likely includes customer names, physical shipping addresses, phone numbers, and email addresses. The company emphasized that the breach originated within the systems of their logistics partner rather than Valve’s own internal servers. While Valve has confirmed the exposure of delivery-related information, they have not yet provided a specific count of how many individuals were affected by the incident.

This event highlights the risks associated with third-party data handling in global supply chains. As of the current reporting, Valve has advised customers to remain vigilant regarding potential phishing attempts or unsolicited communications that may use the stolen contact information. The company has not announced any changes to its logistics partnerships or specific security overhauls in response to the incident, though it continues to coordinate with CEVA Logistics to address the fallout of the breach.