CEVA Logistics, a major global logistics and supply chain company, experienced a cyberattack on July 29 that significantly disrupted its European operations. The incident affected eight warehouses, leading to halted shipments and ongoing efforts to restore services. CEVA Logistics is part of the CMA CGM Group, one of the world's largest shipping and logistics firms, operating in over 170 countries.
On August 1, CEVA informed its customers that goods stored at the impacted facilities could not be shipped, underscoring the direct consequences for logistics and supply chain management. While the company has not publicly disclosed technical details about the attack or identified the perpetrators, no ransomware group has yet claimed responsibility.
Reports indicate that the attack may have exposed customer data belonging to major clients, including Valve and the Dutch premium department store chain De Bijenkorf. Valve confirmed that payment details, passwords, and Steam Guard codes were not compromised, as CEVA does not have access to this sensitive information. However, Valve cautioned users to be vigilant against potential phishing campaigns that could leverage the stolen data to impersonate trusted services.
De Bijenkorf, also impacted by the breach, reported that the security incident might have exposed customer names, addresses, email addresses, phone numbers, and online order details, including product information, prices, discounts, delivery specifics, and payment method descriptions. Financial data was not affected. For business customers, company names and VAT numbers may also have been involved. The company noted that in cases of severely outdated VAT numbers for freelancers and sole proprietorships, a VAT number might be composed of a citizen service number.
The potential exposure of customer data, even without financial details, raises concerns about the crafting of convincing phishing attacks. Cybercriminals could exploit this information to trick victims into revealing more sensitive data.
In a separate development in November, a hacker reportedly offered CEVA Logistics' database for sale on a dark web marketplace. The hacker claimed the database contained customer lists, shipping records, contracts, pricing information, and banking details. Such information, if legitimate, could facilitate fraud, impersonation, and further attacks against global supply chain operations.
