[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fGOlfR9bLIRVENHJibOqaZMZUDDdsrtrg5-vJjaJ9zeA":3},{"article":4,"iocs":50,"watch_terms":51,"solutions":52,"lesson":139},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":27,"category":28,"article_tags":32},"4b21faeb-4077-41e3-92b2-4005455ba5db","Valve notifies Steam hardware customers of a data breach","valve-notifies-steam-hardware-customers-of-a-data-breach-3603f0","Video game publisher and digital distribution giant Valve is notifying Steam hardware customers in Europe that hackers stole their data after hacking its shipping partner, CEVA Logistics. [...]","Valve is alerting European Steam hardware customers about a data breach that occurred at its shipping partner, CEVA Logistics. Hackers accessed CEVA's systems between July 29 and August 1, 2026, stealing customer names, addresses, phone numbers, and email addresses. Valve emphasizes that no Steam account or payment information was compromised, but warns customers of potential phishing attacks using the stolen data.","Valve notifies European Steam hardware customers of data breach via shipping partner CEVA Logistics.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fvalve-notifies-steam-hardware-customers-of-a-data-breach\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2026\u002F08\u002F10\u002FValve.jpg","2026-08-10T11:47:55+00:00","2026-08-10T12:00:10.894729+00:00",8,[17,20,23,25],{"name":18,"type":19},"Valve","vendor",{"name":21,"type":22},"Steam","product",{"name":24,"type":19},"CEVA Logistics",{"name":26,"type":19},"CMA CGM Group","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":27,"icon":29,"name":30,"slug":31},null,"Breaches","breaches",[33,38,40,45],{"category":34},{"id":35,"icon":29,"name":36,"slug":37},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":39},{"id":27,"icon":29,"name":30,"slug":31},{"category":41},{"id":42,"icon":29,"name":43,"slug":44},"614132b8-5837-4952-b8b5-c6c9a32a1d85","Privacy","privacy",{"category":46},{"id":47,"icon":29,"name":48,"slug":49},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[18,24,26],{"controls":53,"vendors":138},[54,83,109],{"slug":55,"name":56,"problem":57,"products":58},"email-security","Email security","Phishing, malware and invoice fraud are filtered out before they reach inboxes.",[59,67,75],{"vendor_slug":60,"vendor_name":61,"vendor_logo":62,"product_slug":63,"product_name":64,"url":65,"description":66},"abnormal","Abnormal AI","\u002Fvendor-logos\u002Fabnormal.png","abnormal-email-security","Abnormal Inbound Email Security","https:\u002F\u002Fabnormal.ai\u002F","API-based email security for Microsoft 365 and Google Workspace using behavioural models.",{"vendor_slug":68,"vendor_name":69,"vendor_logo":70,"product_slug":71,"product_name":72,"url":73,"description":74},"darktrace","Darktrace","\u002Fvendor-logos\u002Fdarktrace.png","darktrace-email","Darktrace \u002F EMAIL","https:\u002F\u002Fwww.darktrace.com\u002Fproducts\u002Femail","Email security that flags messages deviating from normal communication patterns.",{"vendor_slug":76,"vendor_name":77,"vendor_logo":78,"product_slug":79,"product_name":80,"url":81,"description":82},"proofpoint","Proofpoint","\u002Fvendor-logos\u002Fproofpoint.png","core-email-protection","Proofpoint Core Email Protection","https:\u002F\u002Fwww.proofpoint.com\u002Fus\u002Fproducts\u002Femail-protection","Email filtering for phishing, malware and business email compromise.",{"slug":84,"name":85,"problem":86,"products":87},"security-awareness-training","Security awareness training and phishing simulation","People recognise and report attacks instead of falling for them.",[88,95,103],{"vendor_slug":89,"vendor_name":90,"vendor_logo":91,"product_slug":84,"product_name":92,"url":93,"description":94},"knowbe4","KnowBe4","\u002Fvendor-logos\u002Fknowbe4.png","KnowBe4 Security Awareness Training","https:\u002F\u002Fwww.knowbe4.com\u002Fproducts\u002Fsecurity-awareness-training","Training library and simulated phishing with reporting.",{"vendor_slug":96,"vendor_name":97,"vendor_logo":98,"product_slug":99,"product_name":100,"url":101,"description":102},"huntress","Huntress","\u002Fvendor-logos\u002Fhuntress.png","managed-sat","Huntress Managed Security Awareness Training","https:\u002F\u002Fwww.huntress.com\u002Fplatform\u002Fsecurity-awareness-training","Security awareness training and phishing simulation, managed for you.",{"vendor_slug":104,"vendor_name":105,"vendor_logo":106,"product_slug":104,"product_name":105,"url":107,"description":108},"hoxhunt","Hoxhunt","\u002Fvendor-logos\u002Fhoxhunt.png","https:\u002F\u002Fhoxhunt.com\u002F","Adaptive phishing simulations and micro-training, with a focus on reporting.",{"slug":110,"name":111,"problem":112,"products":113},"third-party-risk-management","Third-party risk management (TPRM)","You know which suppliers could hurt you, and you hear quickly when one of them is breached.",[114,122,130],{"vendor_slug":115,"vendor_name":116,"vendor_logo":117,"product_slug":118,"product_name":119,"url":120,"description":121},"securityscorecard","SecurityScorecard","\u002Fvendor-logos\u002Fsecurityscorecard.png","security-ratings","SecurityScorecard Ratings","https:\u002F\u002Fsecurityscorecard.com\u002Fsolutions\u002Fuse-cases\u002Fsecurity-ratings\u002F","Outside-in security ratings and monitoring of suppliers.",{"vendor_slug":123,"vendor_name":124,"vendor_logo":125,"product_slug":126,"product_name":127,"url":128,"description":129},"upguard","UpGuard","\u002Fvendor-logos\u002Fupguard.png","upguard-vendor-risk","UpGuard Vendor Risk","https:\u002F\u002Fwww.upguard.com\u002Fproduct\u002Fvendor-risk","Supplier security questionnaires, ratings and continuous monitoring.",{"vendor_slug":131,"vendor_name":132,"vendor_logo":133,"product_slug":134,"product_name":135,"url":136,"description":137},"onetrust","OneTrust","\u002Fvendor-logos\u002Fonetrust.png","third-party-management","OneTrust Third-Party Management","https:\u002F\u002Fwww.onetrust.com\u002Fsolutions\u002Fthird-party-management\u002F","Supplier inventory, risk assessments and monitoring across privacy and security.",[],{"slug":140,"title":141,"body":142,"framework_refs":143,"framework_notes":154},"third-party-logistics-breach-exposes-steam-customer-data","Third-Party Logistics Breach Exposes Steam Customer Data","Valve's data breach originated not within its own systems, but at a third-party shipping partner, CEVA Logistics — a classic supply chain security failure. Attackers accessed CEVA's systems over a four-day window, exfiltrating personally identifiable information (PII) including names, addresses, phone numbers, and email addresses. This incident highlights how an organization's security posture is only as strong as its weakest vendor link, and that customer data shared with partners inherits the risk profile of those partners. Even when core systems like payment platforms remain uncompromised, stolen PII creates significant downstream risk through targeted phishing and social engineering campaigns.",[144,145,146,147,148,149,150,151,152,153],"CIS Control 15 – Service Provider Management","CIS Control 3 – Data Protection","NIST SP 800-53 SA-9 – External Information System Services","NIST SP 800-53 AC-20 – Use of External Information Systems","NIST Privacy Framework PR.DS-P – Data Security for Privacy","GDPR Article 28 – Processor Obligations","GDPR Article 33 – Notification of Data Breach to Supervisory Authority","GDPR Article 5(1)(c) – Data Minimisation","ISO\u002FIEC 27001 Annex A 5.19 – Information Security in Supplier Relationships","ITIL Service Design – Supplier Management Process",{}]