Steam owner Valve has told customers in Europe that their personal information was likely exposed during a cyberattack on one of its partners, according to 01net.com. The breach affected people who purchased Steam-branded hardware, such as the Steam Deck.
Valve sent a notice to affected users warning them to expect fraudulent messages in the coming weeks, as reported by IGN France. The company acknowledged that the stolen data probably included names, addresses, and order details tied to hardware purchases made in Europe.
The attack did not target Steam’s own servers or its game storefront, according to Xboxygen. Instead, the compromise occurred at a third-party partner that handles part of Valve’s hardware sales process. That distinction matters because it means the breach is limited in scope, though the exact number of affected customers has not been disclosed.
KultureGeek reports that the stolen records belong specifically to European customers, and Valve has not indicated whether buyers in other regions were impacted. The company has not yet published a full timeline of the incident, including when the breach was discovered or how long the partner had been exposed.
The warning about fake messages is a practical concern, as cybercriminals often use stolen personal data to craft convincing phishing emails. Customers who bought Steam hardware in Europe should be cautious about unsolicited communications that reference their purchase history.
Valve has not said whether it will offer credit monitoring or other protective services to affected users. The company has also not confirmed whether law enforcement has been involved in the investigation.
What to watch next: whether Valve names the partner involved and whether regulators in the European Union open a formal inquiry under GDPR rules.
