I thought for a second, "Glad I don't live in Europe." Then remembered I live in the US.
this post was submitted on 10 Aug 2026
158 points (100.0% liked)
Steam
17741 readers
309 users here now
Steam is a video game digital distribution service by Valve.
Steam News | Steam Beta Client news
Useful tools:
SteamDB
SteamCharts
Issue tracker for Linux version of Steam
founded 5 years ago
MODERATORS
🤣... 💀
At least they've been as upfront as possible and given the less savvy an idea of what to be wary of
Sucks that it happened, but still.
CEVA serves a lot of companies, so it isn't just Steam, it's a lot of them. I've gotten 2 mails like this related to CEVA recently.
Just checked my mail and got it too. Man this sucks. I'm a bit careful already and Valve is one of the trusted companies. But what can we and Valve do, if the company who needs these data to ship gets hacked. They have my full name and address and email...
What can man do against such recklessness?
Nothing. It’s just a game of chance at this stage given how many intermediaries are necessary between where you order something and who needs to know where to deliver it. Each step in that long ass process can eventually fail. It takes one to get your information out - and in this case it’s not like you can move or change your name as a measure compared to when some online only service fails you.
anyone else old enough to remember when the great promise of the internet was disintermediation?
good times
Sure do :( Even professionally I remember times where accountability meant something and it was not diluted across 20 parties. Fucking shame.
There are quite few things you can do, depending on where you live:
- Do not put your real name or address into the forms if possible.
- Use temporary phone number.
- Use alias email address and change it if it gets leaked.
Learn from it.
Anyone got a link to the actual news, posted by Valve? I don't feel like sharing an unverified screenshot with my friends.
It's an email.
I received it, can confirm it's real
Steam should sue them for damaging their reputation with customers.
Only shit that works with greedy co.panies is hitting them in The wallet
Can you imagine a company like CEVA making millions upon millions of dollars year over year and not spending any of that for security?
Who says they don't spend any of that for security? Security is not reached by just throwing with money. We don't know the details how this happened. So I would be careful with premature conclusions like that.
it was eight warehouses - and warehousing/ middle mile logistics is very fraught with give and take
we don't know what happened but freightwaves is reporting it was at the warehouse level so I'm guessing it was at the consolidation/LTL stage - meaning it was warehousing that has recieved the inventory and is working out how and where to get it to the address
knowing they run a proprietary blend of cargowise freight tech it's likely the hackers got access to a regional managers account, probably pretty low on the totem pole
Ok, "spending a fraction of it on piss poor security."
You still don't know how much they spend and how the attack was done. Often security isn't even a matter of money, but knowledge and trust of your own teammates. Maybe you are right after all, but my point is, we don't know YET.
Exactly. It only takes one printed picking list not shredded correctly and some asshole dumpster diving and there it goes. Or a wrongly formatted mail recipient… so many ways for humans to fail it’s funny to always see security reduced to technical measures.
Nowadays every company is a tech company. But not every company knows that.
There are also attacks like an employee attacking his/her own company (pump.fun), or simply corruption..
oh wow glad I got unlucky with the random sort (haven't received the invitation to purchase yet)
Can we setup a pinned post or something to report any sus emails anyone gets they think is related to this?