CEVA Logistics is working to restore operations across eight European warehouses following a July cyberattack that exposed sensitive customer data belonging to major clients like Valve and De Bijenkorf.

Key Points

• The cyberattack, which began on July 29, disrupted logistics services and prevented the shipment of goods from eight European warehouse facilities.
• Compromised data includes names, contact details, order histories, and VAT numbers, though companies confirmed financial information remained secure.
• Major clients affected by the breach include the gaming company Valve and the Dutch department store chain De Bijenkorf.
• In November, an unidentified actor listed the company’s stolen database for sale on a dark web marketplace, offering shipping records and contracts.
• Valve issued warnings to users regarding potential phishing attempts that may leverage stolen information to impersonate trusted services.

Why it Matters

This incident highlights the significant vulnerability of global supply chains to cyberattacks that can disrupt physical goods movement and compromise sensitive client data. The exposure of detailed shipping and contact information creates long-term risks for customers, as malicious actors may use this data to conduct sophisticated phishing campaigns or corporate fraud.