Anyone who ordered Steam hardware in the last ~3 months in Europe just had their names, address, phone number and email stolen

324 points · 54 comments · view on lemmy.world

54 Comments

SoupBrick@pawb.social · 132 pts · 14d (1 reply)

I thought for a second, "Glad I don't live in Europe." Then remembered I live in the US.

cyberpunk007@lemmy.ca · 56 pts · 14d

🤣... 💀

Thorry@feddit.org · 64 pts · 14d (1 reply)

CEVA serves a lot of companies, so it isn't just Steam, it's a lot of them. I've gotten 2 mails like this related to CEVA recently.

thingsiplay@lemmy.ml · 32 pts · 14d (6 replies)

Just checked my mail and got it too. Man this sucks. I'm a bit careful already and Valve is one of the trusted companies. But what can we and Valve do, if the company who needs these data to ship gets hacked. They have my full name and address and email...

bjoern_tantau@swg-empire.de · 11 pts · 14d (5 replies)

What can man do against such recklessness?

a4ng3l@lemmy.world · 15 pts · 14d (2 replies)

Nothing. It’s just a game of chance at this stage given how many intermediaries are necessary between where you order something and who needs to know where to deliver it. Each step in that long ass process can eventually fail. It takes one to get your information out - and in this case it’s not like you can move or change your name as a measure compared to when some online only service fails you.

bjc@scribe.disroot.org · 1 pts · 14d (1 reply)

anyone else old enough to remember when the great promise of the internet was disintermediation?

good times

a4ng3l@lemmy.world · 3 pts · 14d

Sure do :( Even professionally I remember times where accountability meant something and it was not diluted across 20 parties. Fucking shame.

BiscuityCat@lemmy.world · 5 pts · 14d

There are quite few things you can do, depending on where you live:

  • Do not put your real name or address into the forms if possible.
  • Use temporary phone number.
  • Use alias email address and change it if it gets leaked.
thingsiplay@lemmy.ml · 4 pts · 14d

Learn from it.

yermaw@sh.itjust.works · 23 pts · 14d (2 replies)

At least they've been as upfront as possible and given the less savvy an idea of what to be wary of

Sucks that it happened, but still.

RandomLegend@lemmy.dbzer0.com · 6 pts · 13d (1 reply)

As much as i enjoy Valves overall practices, this is nothing they should be glorified for.

Here in the EU it is obligatory to inform your customers about incidents like this.

So it's not that they do this out of the goodness of their hearts.

architect@thelemmy.club · 1 pts · 13d

I mean they do this in the USA too and we are a shit hole country apparently.

You bet your ass they would’ve done this Because their first fucking sentence is to blame a European company for it. They would have absolutely sent that email no matter what in this case. They did Not do it out of the goodness of their heart regardless, because they took the opportunity to immediately place the blame, where it belongs, on another company. They would have sent this email out, no matter what. There are no laws in Europe that made it so this happened.

Maybe the company that’s at fault letting you know is doing that because they are afraid of legal implications. But valve is going to tell you that it’s some other asshole‘s fault no matter who told them they had to or not.

gibmiser@lemmy.world · 14 pts · 14d

Steam should sue them for damaging their reputation with customers.

Only shit that works with greedy co.panies is hitting them in The wallet

inlandempire@jlai.lu · 12 pts · 14d

oh wow glad I got unlucky with the random sort (haven't received the invitation to purchase yet)

DanceMomsSavedMe@lemmy.zip · 12 pts · 14d (8 replies)

Can you imagine a company like CEVA making millions upon millions of dollars year over year and not spending any of that for security?

thingsiplay@lemmy.ml · 53 pts · 14d (5 replies)

Who says they don't spend any of that for security? Security is not reached by just throwing with money. We don't know the details how this happened. So I would be careful with premature conclusions like that.

funkless_eck@sh.itjust.works · 4 pts · 14d (1 reply)

it was eight warehouses - and warehousing/ middle mile logistics is very fraught with give and take

we don't know what happened but freightwaves is reporting it was at the warehouse level so I'm guessing it was at the consolidation/LTL stage - meaning it was warehousing that has recieved the inventory and is working out how and where to get it to the address

knowing they run a proprietary blend of cargowise freight tech it's likely the hackers got access to a regional managers account, probably pretty low on the totem pole

Buddahriffic@lemmy.world · 1 pts · 13d

Someone must have clicked a link and it wasn't a training email. Then entered their information.

DanceMomsSavedMe@lemmy.zip · -10 pts · 14d (2 replies)

Ok, "spending a fraction of it on piss poor security."

thingsiplay@lemmy.ml · 28 pts · 14d (1 reply)

You still don't know how much they spend and how the attack was done. Often security isn't even a matter of money, but knowledge and trust of your own teammates. Maybe you are right after all, but my point is, we don't know YET.

a4ng3l@lemmy.world · 5 pts · 14d

Exactly. It only takes one printed picking list not shredded correctly and some asshole dumpster diving and there it goes. Or a wrongly formatted mail recipient… so many ways for humans to fail it’s funny to always see security reduced to technical measures.

bjoern_tantau@swg-empire.de · 17 pts · 14d

Nowadays every company is a tech company. But not every company knows that.

Lai0602p@sh.itjust.works · 3 pts · 14d

There are also attacks like an employee attacking his/her own company (pump.fun), or simply corruption..

infinitesunrise@slrpnk.net · 5 pts · 14d (2 replies)

Anyone got a link to the actual news, posted by Valve? I don't feel like sharing an unverified skyscraper-height screenshot with my friends.

gressen@lemmy.zip · 9 pts · 14d

It's an email.

pankuleczkapl@lemmy.dbzer0.com · 8 pts · 14d

I received it, can confirm it's real

NewNewAugustEast@lemmy.zip · 3 pts · 14d

At this point who doesn't have all my details? I was just talking about this recently.

I am not sure it's even worth caring about anymore because everything is out there already. And I mean everything.

uber_chicken@lemmy.world · 1 pts · 14d

Can we setup a pinned post or something to report any sus emails anyone gets they think is related to this?

DonutsRMeh@lemmy.world · -7 pts · 14d (6 replies)

When you lay off all of your security staff and replace them with AI. God, the AI craze is going to cause so much damage before corporations realize that it is not as “absolutely perfect” like its sellers hype it to be.

Edit: to clerify, I wasn’t talking about valve. I was talking about the company they use for shipping.

cyberpunk007@lemmy.ca · 3 pts · 14d (5 replies)

Did I miss a news article somewhere of valve doing this?

DonutsRMeh@lemmy.world · 1 pts · 14d (4 replies)

I never said valve. I was talking about the the company they use for shipping

Prancingpotato@lemmy.world · 2 pts · 14d (3 replies)

Good thing you have any indication or evidence that it happened at the logistics company then

DonutsRMeh@lemmy.world · -4 pts · 14d (2 replies)

Now we are defending the company that leaked people’s data? What else could be the cause in this day and age? They’re a slop who didn’t give a single shit about their security.

AlteredEgo@lemmy.ml · 4 pts · 14d

Without truth, you're the slop

graynk@discuss.tchncs.de · 3 pts · 14d

The fact that they leaked people's data doesn't mean that you can just invent stuff. Companies managed to leak data just fine way before AI was a thing.

vivalapivo@lemmy.today · -57 pts · 14d (18 replies)
[ removed ]
glimse@lemmy.world · 41 pts · 14d (8 replies)

Should have thrown a "fuck spez" in there to drive home what a badass you are

vivalapivo@lemmy.today · -16 pts · 14d (7 replies)
[ removed ]
glimse@lemmy.world · 27 pts · 14d (5 replies)

Yeah that guy sucks

thingsiplay@lemmy.ml · 12 pts · 14d (2 replies)

I think he is a nice guy. Just gets a bad rep.

glimse@lemmy.world · 4 pts · 14d (1 reply)

I dunno man, I think he's earned it

thingsiplay@lemmy.ml · 2 pts · 14d

Now its our secret. <3

vivalapivo@lemmy.today · -1 pts · 14d (1 reply)

His intimate life is not my concern

glimse@lemmy.world · 6 pts · 14d

Damn, don't cut yourself with that edge

czl@lemmy.dbzer0.com · 2 pts · 14d

Fuck lemmy.world in general?

Makhno@lemmy.world · 11 pts · 14d

Wow so brave

thingsiplay@lemmy.ml · 9 pts · 14d (7 replies)

You are in a Steam Community.

bjoern_tantau@swg-empire.de · 6 pts · 14d (5 replies)

I thought this was a Wendy's.

vivalapivo@lemmy.today · -1 pts · 14d (4 replies)

Fuck Wendy

thingsiplay@lemmy.ml · 3 pts · 14d (3 replies)

Sir, this is a Wendy 's.

mushroommunk@lemmy.today · 5 pts · 14d

No this is Patrick

vivalapivo@lemmy.today · 0 pts · 14d (1 reply)

Wendy's what??

thingsiplay@lemmy.ml · 1 pts · 14d

Yes.

vivalapivo@lemmy.today · -2 pts · 14d

Fuck Community