If you’ve purchased some of Valve’s hardware within the last three months, some of your data may have been stolen. That’s straight from Valve themselves, who have begun contacting European customers to warn them of a cyberattack which targeted their delivery partner, CEVA logistics.

According to the emails being sent out by Valve, CEVA got hit by a cyberattack between July 29 and August 1. Valve was apparently only informed on August 7 that some information had been compromised.

CEVA handles European shipping for the Steam Deck, Steam Machine and Steam Controllers, and keeps customer data for up to 90-days.

Potentially exposed information includes:

• Name
• Address
• Phone number
• Steam account email address
• Product ordered
• Total order price

Valve notes that passwords, payment detals and Steam Guard codes were not compromised, so nobody should be accessing your Steam account.

However, Valve is warning people to keep an out for convincing phishing Emails, texts or calls. Scammers will try to use the stolen information to convince you of their authenticity, which in turn will inevitably lead to them trying to get money or access other things, perhaps by trying to say you to pay a customes fee or sign in somewhere to verify your order.

The email Valve sent out states the company is “pressing CEVA for the full scope of what was taken and how, and we are in the process of notifying the data protection authorities in the countries affected, including yours.”

Other users on Reddit have mentioned recieving Emails from other companies who use CEVA too, demonstrating how big the leak may be. Yahoo Finance claims CEVA is one of the largest third-party logistics providers in the world with more than 1,000 warehouses. According to Yahoo, around 8 warehouses were disrupted due to the attack.

So keep an eye out for an Emails, calls or texts claiming to be Valve.