Valve Warns Steam Machine Buyers About Scam Messages After Cyberattack

August 11, 2026 - 12:47

Valve has issued a security alert for anyone who purchased a Steam Machine through its European distribution partner. The warning comes after a cyberattack exposed customer details, including names, shipping addresses, and order histories. The company says the breach did not touch Steam accounts or payment information, but the leaked data is enough for scammers to craft convincing fake messages.

According to Valve, the attack hit its fulfillment partner in Europe, not Steam itself. Still, the company is telling buyers to be on guard for unsolicited emails, texts, or social media messages that reference their Steam Machine order. These messages may claim there is a problem with delivery, offer a refund, or ask the customer to verify account details. Some may even include a link that looks like an official Steam page but leads to a fake login screen.

Valve stresses that it will never ask for passwords, credit card numbers, or two-factor authentication codes through email or chat. Any message that does so should be treated as a scam. Customers who receive suspicious correspondence should report it to Steam Support and delete it without clicking any links.

The company also recommends changing Steam passwords as a precaution, though it says there is no evidence that account credentials were compromised. For those who reused the same password elsewhere, updating it is a smart move. Valve has not said how many customers were affected or when the breach was discovered, but it is working with the partner to tighten security and prevent future incidents. Until the situation is fully resolved, buyers should stay alert and verify any order-related communication directly through their Steam account page.