A cyberattack on global logistics company CEVA Logistics has affected customers of several major European companies, with personal information reportedly exposed and some deliveries delayed.
The breach has affected at least eight CEVA warehouses in Europe and has disrupted the fulfilment of orders for companies that depend on the logistics provider to store and deliver goods to customers.
Among those affected are Dutch online retailer Bol, luxury retailer De Bijenkorf, football club Ajax, ING and eyewear company Ace & Tate.
Video game giant Valve has also warned customers who recently purchased Steam hardware in Europe that their delivery information may have been compromised.
CEVA confirmed that a cyber intrusion was affecting part of its European contract logistics operations and said its cybersecurity teams activated response protocols after detecting the incident.
See also: South Korea Moves to Fast-Track $576bn Semiconductor Expansion
According to the company, the operational impact is currently limited to eight warehouses, while its other systems and operations worldwide remain unaffected.
The attack reportedly began on July 29, with disruptions continuing to affect deliveries from some of the warehouses involved.
For customers, however, the biggest concern is not only delayed shipments but the potential exposure of personal information used to fulfil their orders.
The data reportedly includes customers’ names, home addresses, telephone numbers and email addresses.
Valve said it became aware on August 7 that data had been taken from CEVA’s systems and that it affected customers for whom CEVA keeps shipping and delivery information for about 90 days after an order.
Valve stressed that the affected information did not include customers’ payment details, passwords or Steam Guard authentication codes. It nevertheless warned customers to be cautious of fraudulent emails, text messages and phone calls that could exploit the leaked delivery information.
Bol had earlier warned customers that its logistics partner had suffered a security incident, saying the company’s own systems were not compromised.
The retailer said some customers could experience delays or cancelled orders as a result of the disruption.
De Bijenkorf also reported delays after the incident, while Ajax, ING and Ace & Tate confirmed that customer shipping information was potentially affected.
CEVA, headquartered in France, is one of the world’s largest logistics companies, operating more than 1,000 warehouses globally, and it generated $18.3 billion in revenue in 2025.
The company has not disclosed how much data was taken or whether the attackers have demanded a ransom.
CEVA said some affected applications and services have been restored and that it is cooperating with authorities as investigations continue.
Dutch authorities are reportedly investigating the incident, while the country’s data protection regulator has also been approached for comment.
About the Author
Cecilia Attah is a tech analyst with a degree from Benue State University. She covers tech news and startups at TechRegard with a focus on how technology is transforming Africa and shaping the global landscape.
