One of the world's largest shipping and logistics companies, France-headquartered Ceva Logistics, is grappling with a cyberattack that began on July 29 and disrupted operations at eight of its European warehouses. The intrusion also triggered a data breach: TechCrunch reports that customer names, home addresses, phone numbers and email addresses used to place orders were taken from Ceva's systems.

The fallout is spreading across industries. Valve told customers who recently bought Steam hardware in Europe that their shipping information was stolen — Ceva stores delivery data for 90 days after an order. Dutch online retailer Bol warned customers their data may have been taken, while luxury retailer De Bijenkorf, football club Ajax, bank ING and eyewear maker Ace & Tate also confirmed their customers' shipping information was affected. The Dutch data protection authority said it has received breach reports from ten organizations in connection with the incident.

Ceva, which brought in $18.3 billion in revenue in 2025 and operates more than a thousand warehouses worldwide, confirmed the intrusion on August 1 and said the operational impact is limited to eight warehouses, with other systems unaffected. It said it is working with authorities, but has not disclosed how much data was taken or whether the hackers demanded a ransom. Shipping and logistics firms have become an increasingly popular target for cybercriminals, who use stolen customer data for fraud and to coordinate physical theft of goods.

Sources