Valve has begun notifying customers of its Steam Machine PC that their personal details may have been compromised. Affecting European owners of the PC, Valve says that a logistics company that helps ship the unit in that region was the target of a cyberattack, although “additional information” related to Steam accounts remains safe.
Because the company holds onto consumer information for up to 90 days, details like a client’s name, street address, phone number, and email address may have been acquired. Valve says that this means that people could expect fake messages–via email, SMS, or phone–targeting them, with scammers using the details on their recent hardware purchase to extract cash from an unlucky recipient.
“They may quote your address back to you to prove they’re genuine,” Valve wrote in a PSA sent out to customers (via ResetEra). “They may ask you to confirm a delivery, pay a small customs or redelivery fee, or sign in somewhere to ‘verify’ your order. Treat all of them as fake.”
