Just checked my mail and got it too. Man this sucks. I'm a bit careful already and Valve is one of the trusted companies. But what can we and Valve do, if the company who needs these data to ship gets hacked. They have my full name and address and email...
Nothing. It’s just a game of chance at this stage given how many intermediaries are necessary between where you order something and who needs to know where to deliver it. Each step in that long ass process can eventually fail. It takes one to get your information out - and in this case it’s not like you can move or change your name as a measure compared to when some online only service fails you.
I mean they do this in the USA too and we are a shit hole country apparently.
You bet your ass they would’ve done this Because their first fucking sentence is to blame a European company for it. They would have absolutely sent that email no matter what in this case. They did Not do it out of the goodness of their heart regardless, because they took the opportunity to immediately place the blame, where it belongs, on another company. They would have sent this email out, no matter what. There are no laws in Europe that made it so this happened.
Maybe the company that’s at fault letting you know is doing that because they are afraid of legal implications. But valve is going to tell you that it’s some other asshole‘s fault no matter who told them they had to or not.
Who says they don't spend any of that for security? Security is not reached by just throwing with money. We don't know the details how this happened. So I would be careful with premature conclusions like that.
it was eight warehouses - and warehousing/ middle mile logistics is very fraught with give and take
we don't know what happened but freightwaves is reporting it was at the warehouse level so I'm guessing it was at the consolidation/LTL stage - meaning it was warehousing that has recieved the inventory and is working out how and where to get it to the address
knowing they run a proprietary blend of cargowise freight tech it's likely the hackers got access to a regional managers account, probably pretty low on the totem pole
You still don't know how much they spend and how the attack was done. Often security isn't even a matter of money, but knowledge and trust of your own teammates. Maybe you are right after all, but my point is, we don't know YET.
Exactly. It only takes one printed picking list not shredded correctly and some asshole dumpster diving and there it goes.
Or a wrongly formatted mail recipient… so many ways for humans to fail it’s funny to always see security reduced to technical measures.
When you lay off all of your security staff and replace them with AI. God, the AI craze is going to cause so much damage before corporations realize that it is not as “absolutely perfect” like its sellers hype it to be.
Edit: to clerify, I wasn’t talking about valve. I was talking about the company they use for shipping.
Now we are defending the company that leaked people’s data? What else could be the cause in this day and age? They’re a slop who didn’t give a single shit about their security.
The fact that they leaked people's data doesn't mean that you can just invent stuff. Companies managed to leak data just fine way before AI was a thing.
54 replies
I thought for a second, "Glad I don't live in Europe." Then remembered I live in the US.
🤣... 💀
CEVA serves a lot of companies, so it isn't just Steam, it's a lot of them. I've gotten 2 mails like this related to CEVA recently.
https://techcrunch.com/2026/08/10/a-data-breach-at-shipping-giant-ceva-logistics-is-rippling-across-banks-retailers-steam-gamers-and-beyond/
Just checked my mail and got it too. Man this sucks. I'm a bit careful already and Valve is one of the trusted companies. But what can we and Valve do, if the company who needs these data to ship gets hacked. They have my full name and address and email...
What can man do against such recklessness?
Nothing. It’s just a game of chance at this stage given how many intermediaries are necessary between where you order something and who needs to know where to deliver it. Each step in that long ass process can eventually fail. It takes one to get your information out - and in this case it’s not like you can move or change your name as a measure compared to when some online only service fails you.
anyone else old enough to remember when the great promise of the internet was disintermediation?
good times
Sure do :( Even professionally I remember times where accountability meant something and it was not diluted across 20 parties. Fucking shame.
There are quite few things you can do, depending on where you live:
Learn from it.
At least they've been as upfront as possible and given the less savvy an idea of what to be wary of
Sucks that it happened, but still.
As much as i enjoy Valves overall practices, this is nothing they should be glorified for.
Here in the EU it is obligatory to inform your customers about incidents like this.
So it's not that they do this out of the goodness of their hearts.
I mean they do this in the USA too and we are a shit hole country apparently.
You bet your ass they would’ve done this Because their first fucking sentence is to blame a European company for it. They would have absolutely sent that email no matter what in this case. They did Not do it out of the goodness of their heart regardless, because they took the opportunity to immediately place the blame, where it belongs, on another company. They would have sent this email out, no matter what. There are no laws in Europe that made it so this happened.
Maybe the company that’s at fault letting you know is doing that because they are afraid of legal implications. But valve is going to tell you that it’s some other asshole‘s fault no matter who told them they had to or not.
Steam should sue them for damaging their reputation with customers.
Only shit that works with greedy co.panies is hitting them in The wallet
oh wow glad I got unlucky with the random sort (haven't received the invitation to purchase yet)
Can you imagine a company like CEVA making millions upon millions of dollars year over year and not spending any of that for security?
Who says they don't spend any of that for security? Security is not reached by just throwing with money. We don't know the details how this happened. So I would be careful with premature conclusions like that.
it was eight warehouses - and warehousing/ middle mile logistics is very fraught with give and take
we don't know what happened but freightwaves is reporting it was at the warehouse level so I'm guessing it was at the consolidation/LTL stage - meaning it was warehousing that has recieved the inventory and is working out how and where to get it to the address
knowing they run a proprietary blend of cargowise freight tech it's likely the hackers got access to a regional managers account, probably pretty low on the totem pole
Someone must have clicked a link and it wasn't a training email. Then entered their information.
Ok, "spending a fraction of it on piss poor security."
You still don't know how much they spend and how the attack was done. Often security isn't even a matter of money, but knowledge and trust of your own teammates. Maybe you are right after all, but my point is, we don't know YET.
Exactly. It only takes one printed picking list not shredded correctly and some asshole dumpster diving and there it goes. Or a wrongly formatted mail recipient… so many ways for humans to fail it’s funny to always see security reduced to technical measures.
Nowadays every company is a tech company. But not every company knows that.
There are also attacks like an employee attacking his/her own company (pump.fun), or simply corruption..
Anyone got a link to the actual news, posted by Valve? I don't feel like sharing an unverified skyscraper-height screenshot with my friends.
It's an email.
I received it, can confirm it's real
At this point who doesn't have all my details? I was just talking about this recently.
I am not sure it's even worth caring about anymore because everything is out there already. And I mean everything.
Can we setup a pinned post or something to report any sus emails anyone gets they think is related to this?
When you lay off all of your security staff and replace them with AI. God, the AI craze is going to cause so much damage before corporations realize that it is not as “absolutely perfect” like its sellers hype it to be.
Edit: to clerify, I wasn’t talking about valve. I was talking about the company they use for shipping.
Did I miss a news article somewhere of valve doing this?
I never said valve. I was talking about the the company they use for shipping
Good thing you have any indication or evidence that it happened at the logistics company then
Now we are defending the company that leaked people’s data? What else could be the cause in this day and age? They’re a slop who didn’t give a single shit about their security.
Without truth, you're the slop
The fact that they leaked people's data doesn't mean that you can just invent stuff. Companies managed to leak data just fine way before AI was a thing.
Should have thrown a "fuck spez" in there to drive home what a badass you are
Yeah that guy sucks
I think he is a nice guy. Just gets a bad rep.
I dunno man, I think he's earned it
Now its our secret. <3
His intimate life is not my concern
Damn, don't cut yourself with that edge
Fuck lemmy.world in general?
Wow so brave
You are in a Steam Community.
I thought this was a Wendy's.
Fuck Wendy
Sir, this is a Wendy 's.
No this is Patrick
Wendy's what??
Yes.
Fuck Community