CEVA Logistics Hit by Cyberattack, Affecting Warehouses and Shipments in Europe

440/69 Friday, August 14, 2026 CEVA Logistics, a logistics company under CMA CGM Group, disclosed a cyberattack that occurred on July 29, 2026, affecting some of its operations in Europe. Eight warehouses were impacted, and the company is currently working to restore affected services. CEVA Logistics operates in more than 170 countries and is part of CMA CGM Group, one of the world’s largest shipping and logistics groups. On August 1, the company notified affected customers that goods stored at impacted facilities could not be shipped, demonstrating a direct impact on logistics and supply chain operations. The company has not disclosed technical details of the attack, and no ransomware group has claimed responsibility at this time. However, reports indicate that the attack exposed customer data related to some major clients, including Valve and Ajax. Valve stated that payment details, passwords, and Steam Guard codes were not affected because CEVA did not have access to that information. However, the stolen customer data could still be used to create more convincing phishing campaigns. Users have therefore been warned to remain cautious of suspicious emails or messages that may use information from this incident to impersonate trusted services and trick them into disclosing sensitive information. In addition, some affected organizations reported that personal data may have been exposed alongside shipment delays. De Bijenkorf, a premium department store chain in the Netherlands, stated that the incident may have affected information such as names, addresses, email addresses, phone numbers, and online order details, including product information, prices, discounts, delivery details, and descriptions of the payment method used. No financial data was affected. For business customers, the exposed information may also include company names and VAT numbers if they were entered in user accounts. Additional reports indicate that a hacker previously offered a CEVA database for sale on a dark web marketplace, claiming it contained customer lists, shipping records, contracts, pricing information, and banking details. Such data could be used for fraud, impersonation, and attacks against global supply chains.