Ceva Logistics Cyberattack Disrupts Retail Shipments, May Expose Customer Data
Summary
A reported cyberattack on Ceva Logistics disrupted shipments at eight European warehouses and may have exposed customer data tied to Bol and Steam hardware orders. The attacker, full scope and any ransomware or extortion remain unknown.
Key points
- Media reports say a cyber intrusion disrupted Ceva’s contract logistics operations at eight European warehouses, delaying shipments.
- Bol said an investigation found attackers gained access to two Ceva systems used to process orders; Bol’s own systems were reportedly unaffected.
- Information in the affected systems may have been viewed or copied, including customer contact, shipment and purchase details.
- Valve notified European Steam hardware customers that delivery information held by Ceva may have been compromised; it could not determine which records were obtained.
- Bol paused data exchanges with Ceva as a precaution, and affected products were temporarily taken offline; some orders were delayed or canceled.
- The attacker, full scope of the incident and whether ransomware or extortion were involved remain unclear.
Article Details
- Victim Organization
- Ceva Logistics
- Incident Type
- Cyber intrusion affecting logistics systems, with reported unauthorized access and possible exposure of customer and shipment data
- Data Types Exposed
- Names
- Street addresses
- Postal codes
- Cities
- Countries
- Telephone numbers
- Email addresses
- Order numbers
- Tracking information
- Purchase details
- Messages attached to gift cards
- Steam hardware type and price
- Affected Records
- Unknown; Valve said it could not determine precisely which records attackers obtained.
- Operational Impact
- The incident reportedly disrupted eight warehouses in Europe, causing shipment delays. Some Bol orders were delayed or canceled, affected products were temporarily taken offline, and Bol suspended data exchanges with Ceva as a precaution. A source cited by FreightWaves said other Ceva systems and transportation operations were not affected.
- Ransom Or Extortion
- Unknown; it remains unclear whether ransomware was deployed or an extortion demand was made.
- Claim Status
- claimed
Vendors
Products
Countries
Industries
E-commerceCompanies reported to have been affected include Dutch e-commerce giant Bol, luxury department store De Bijenkorf, eyewear company Ace & Tate and Amsterdam football club Ajax, as well as Steam’s hardware business inlogisticsA cyberattack on Ceva Logistics disrupted shipments for major European retailers and may have exposed customer data tied to Steam hardware orders in Europe.