Ceva Logistics Cyberattack Disrupts European Warehouses, Exposes Customer Data

Global shipping and logistics provider Ceva Logistics, a subsidiary of France-based CMA CGM Group, suffered a cyberattack on July 29 that disrupted operations across eight European warehouses and potentially exposed personal data belonging to customers of multiple major brands. The company notified affected clients on August 1, confirming that goods stored at the impacted facilities are not shipping while systems are being restored.

Several high-profile organizations have confirmed exposure from the incident, including Dutch retailers Bol and De Bijenkorf, financial institution ING, eyewear brand Ace & Tate, Amsterdam football club Ajax, and video game platform Valve. Bol disclosed that two order-processing systems tied to one of its fulfilment centers were compromised, meaning customer data processed through that location may have been viewed or copied. De Bijenkorf warned that exposed information could include names, addresses, email addresses, phone numbers, and order details, while noting that no payment data, IBANs, credit card numbers, or passwords were involved. Valve, which uses Ceva to ship physical hardware to European customers, confirmed that delivery-related information retained by the logistics provider for three months was likely compromised.

The attack vector, threat actor, and total number of affected individuals remain unknown. Notably, this marks Ceva Logistics' second breach within a year, following two attacks claimed by the extortion group Coinbase Cartel in 2024. Organizations concerned about credential exposure from third-party incidents can verify employee accounts using an email breach checker, while security teams should audit network exposure with a port scanner and validate SSL configurations via an SSL/TLS checker to reduce supply-chain attack surfaces.