Ceva Logistics, one of the world's largest shipping and logistics companies, has confirmed a cyberattack that affected part of its European contract logistics network. The incident is linked to eight warehouses and has triggered shipping delays for goods moving across the continent.
According to the company, its cybersecurity teams activated security protocols immediately after the intrusion was detected and launched an ongoing investigation. Ceva said the impact is limited to the affected warehouses, while its other global operations continue to run normally.
The breach has also raised concerns for several businesses that depend on Ceva's logistics services. Retailers and brands including Bol, De Bijenkorf, ING, Ajax, Ace & Tate, and Valve сообщили that shipping-related customer information may have been exposed. Reported data includes names, home addresses, phone numbers, and email addresses used for deliveries.
Valve said customers who recently ordered Steam hardware were informed after learning that data had been taken from Ceva's systems. Ceva stores delivery information for a limited period after orders are placed, which made the incident relevant to a broad set of customers and partners.
Ceva has said some affected applications and services are back online and that it is cooperating with authorities. The case highlights how logistics networks are becoming a key focus for cybersecurity, as they connect digital commerce with real-world delivery at scale. In the future, stronger supply-chain security could become a defining standard for global trade.
