Just checked my mail and got it too. Man this sucks. I'm a bit careful already and Valve is one of the trusted companies. But what can we and Valve do, if the company who needs these data to ship gets hacked. They have my full name and address and email...

[–] bjoern_tantau@swg-empire.de 9 points 3 weeks ago* (last edited 3 weeks ago) (3 children)

What can man do against such recklessness?

[–] a4ng3l@lemmy.world 10 points 3 weeks ago (1 children)

Nothing. It’s just a game of chance at this stage given how many intermediaries are necessary between where you order something and who needs to know where to deliver it. Each step in that long ass process can eventually fail. It takes one to get your information out - and in this case it’s not like you can move or change your name as a measure compared to when some online only service fails you.

[–] bjc@scribe.disroot.org 0 points 3 weeks ago (1 children)

anyone else old enough to remember when the great promise of the internet was disintermediation?

good times

[–] a4ng3l@lemmy.world 2 points 3 weeks ago

Sure do :( Even professionally I remember times where accountability meant something and it was not diluted across 20 parties. Fucking shame.

[–] BiscuityCat@lemmy.world 3 points 3 weeks ago* (last edited 3 weeks ago)

There are quite few things you can do, depending on where you live:

Do not put your real name or address into the forms if possible.
Use temporary phone number.
Use alias email address and change it if it gets leaked.

[–] thingsiplay@lemmy.ml 1 points 3 weeks ago

Learn from it.

[–] yermaw@sh.itjust.works 12 points 3 weeks ago* (last edited 3 weeks ago) (1 children)

At least they've been as upfront as possible and given the less savvy an idea of what to be wary of

Sucks that it happened, but still.

[–] RandomLegend@lemmy.dbzer0.com 6 points 3 weeks ago (1 children)

As much as i enjoy Valves overall practices, this is nothing they should be glorified for.

Here in the EU it is obligatory to inform your customers about incidents like this.

So it's not that they do this out of the goodness of their hearts.

[–] architect@thelemmy.club 0 points 3 weeks ago* (last edited 3 weeks ago)

I mean they do this in the USA too and we are a shit hole country apparently.

You bet your ass they would’ve done this Because their first fucking sentence is to blame a European company for it. They would have absolutely sent that email no matter what in this case. They did Not do it out of the goodness of their heart regardless, because they took the opportunity to immediately place the blame, where it belongs, on another company. They would have sent this email out, no matter what. There are no laws in Europe that made it so this happened.

Maybe the company that’s at fault letting you know is doing that because they are afraid of legal implications. But valve is going to tell you that it’s some other asshole‘s fault no matter who told them they had to or not.

[–] gibmiser@lemmy.world 11 points 3 weeks ago

Steam should sue them for damaging their reputation with customers.

Only shit that works with greedy co.panies is hitting them in The wallet

[–] DanceMomsSavedMe@lemmy.zip 9 points 3 weeks ago (3 children)

Can you imagine a company like CEVA making millions upon millions of dollars year over year and not spending any of that for security?

[–] thingsiplay@lemmy.ml 28 points 3 weeks ago (2 children)

Who says they don't spend any of that for security? Security is not reached by just throwing with money. We don't know the details how this happened. So I would be careful with premature conclusions like that.

[–] funkless_eck@sh.itjust.works 3 points 3 weeks ago

it was eight warehouses - and warehousing/ middle mile logistics is very fraught with give and take

we don't know what happened but freightwaves is reporting it was at the warehouse level so I'm guessing it was at the consolidation/LTL stage - meaning it was warehousing that has recieved the inventory and is working out how and where to get it to the address

knowing they run a proprietary blend of cargowise freight tech it's likely the hackers got access to a regional managers account, probably pretty low on the totem pole

[–] DanceMomsSavedMe@lemmy.zip -4 points 3 weeks ago (1 children)

Ok, "spending a fraction of it on piss poor security."

[–] thingsiplay@lemmy.ml 15 points 3 weeks ago (1 children)

You still don't know how much they spend and how the attack was done. Often security isn't even a matter of money, but knowledge and trust of your own teammates. Maybe you are right after all, but my point is, we don't know YET.

[–] a4ng3l@lemmy.world 2 points 3 weeks ago

Exactly. It only takes one printed picking list not shredded correctly and some asshole dumpster diving and there it goes. Or a wrongly formatted mail recipient… so many ways for humans to fail it’s funny to always see security reduced to technical measures.

[–] bjoern_tantau@swg-empire.de 10 points 3 weeks ago

Nowadays every company is a tech company. But not every company knows that.

[–] Lai0602p@sh.itjust.works 2 points 3 weeks ago

There are also attacks like an employee attacking his/her own company (pump.fun), or simply corruption..

[–] inlandempire@jlai.lu 8 points 3 weeks ago

oh wow glad I got unlucky with the random sort (haven't received the invitation to purchase yet)

[–] infinitesunrise@slrpnk.net 6 points 3 weeks ago (2 children)

Anyone got a link to the actual news, posted by Valve? I don't feel like sharing an unverified screenshot with my friends.

[–] gressen@lemmy.zip 6 points 3 weeks ago

It's an email.

[–] pankuleczkapl@lemmy.dbzer0.com 5 points 3 weeks ago

I received it, can confirm it's real

[–] uber_chicken@lemmy.world 1 points 3 weeks ago

Can we setup a pinned post or something to report any sus emails anyone gets they think is related to this?

load more comments