Shipping and logistics giant Ceva Logistics has had its European operations disrupted after hackers compromised its systems.
The disruption occurred on July 29, and the company is still scrambling to restore the impacted services. Eight warehouses across Europe have been affected.
On August 1, the company notified the affected customers of the cyberattack, informing them that goods stored in the disrupted warehouses are not shipping.
Multiple organizations have reportedly confirmed impact from the incident, including Dutch retailers Bol and De Bijenkorf, ING, Ace & Tate, Amsterdam football club Ajax, and video game provider Valve.
In addition to notifying customers of the delays in order shipments, some of the affected organizations revealed that personal information might have been affected.
“The incident involves two systems used for processing orders from one of Bol’s fulfilment centers. No Bol systems were affected. However, data of customers whose orders were processed via this location may have been viewed or copied,” Bol said.
According to De Bijenkorf, the data breach might involve names, addresses, email addresses, phone numbers, and online order details. For business customers, entity names and identification numbers were potentially exposed, it says.
“There are no payment details, bank account numbers (IBANs), credit card information, usernames or passwords involved in this incident,” De Bijenkorf noted.
Valve also told customers that the delivery-related information of customers was likely compromised in the attack. The company uses Ceva to ship physical hardware to customers in Europe, and the logistics giant retains shipping information for three months, Valve said, according to multiple Reddit posts.
It is unclear how the attackers hacked Ceva’s systems, how many individuals might have been affected, and who was behind the incident.
SecurityWeek has emailed Ceva for additional information on the attack and will update this article if the company responds.
A subsidiary of CMA CGM Group headquartered in France, Ceva Logistics operates over 1,700 facilities worldwide, providing contract logistics and air, ocean, ground, and finished vehicle transport services in 170 countries.
This is not the first time Ceva Logistics has fallen victim to a data breach. Last year, the extortion group Coinbase Cartel claimed two attacks against the company.
Related: Corporate Data Stolen in Levi Strauss Cyberattack
Related: 3.8 Million Impacted by Unlimited Technology Systems Data Breach
Related: 311,000 Impacted by Brown Health Medical Group-MA Data Breach
Related: 150,000 Impacted by Madera Community Hospital Data Breach