The CEVA Logistics data breach is having major knock-on effects across Europe - here's what we know

CEVA Logistics, a major global logistics and supply-chain company, has been the victim of a significant cyberattack that is causing widespread disruption across European warehouses and affecting customer data. The attack is believed to have started on July 29, 2026, and has impacted at least eight warehouses in Europe. CEVA, which provides freight forwarding, contract logistics, warehousing, and transportation services to thousands of clients, including major companies in various sectors, has not yet disclosed the full extent of the breach or filed a report with regulators.

Affected clients have reported compromised delivery information and service delays, with some customers warning of potential targeted scams. Among the impacted companies are Dutch online retailer Bol and Dutch luxury retailer De Bijenkorf. Bol disclosed that data of customers whose orders were processed via one of CEVA's locations may have been viewed or copied, while De Bijenkorf stated that order processing, returns, and refunds might take longer, though its stores remain open.

Valve, a prominent PC gaming company, also confirmed that CEVA shipped Steam hardware to its European customers, and the delivery-related information, including customer names, addresses, phone numbers, email addresses, and order details, is suspected to have been compromised.

Retailers and Valve are urging customers to remain vigilant for fraudulent communications, as they await further details from CEVA. The Dutch data protection authority has received 10 reports related to the incident, indicating the severity of the breach. As the company is a significant player in the logistics industry, with a $18.3 billion gross revenue last year, its cyberattack is expected to have far-reaching consequences for its clients and the broader market.