Ceva Logistics Operations Disrupted by Cyberattack

Summary

Ceva Logistics experienced a cyberattack on July 29th that disrupted its European contract logistics operations, affecting eight warehouses and causing shipment delays for numerous customers. Some affected organizations, including Dutch retailers Bol and De Bijenkorf, reported that personal information such as names, addresses, and order details may have been viewed or copied. The exact nature of the attack and the perpetrators remain unknown.

Full text

Shipping and logistics giant Ceva Logistics has had its European operations disrupted after hackers compromised its systems. The disruption occurred on July 29, and the company is still scrambling to restore the impacted services. Eight warehouses across Europe have been affected. On August 1, the company notified the affected customers of the cyberattack, informing them that goods stored in the disrupted warehouses are not shipping. Multiple organizations have reportedly confirmed impact from the incident, including Dutch retailers Bol and De Bijenkorf, ING, Ace & Tate, Amsterdam football club Ajax, and video game provider Valve. In addition to notifying customers of the delays in order shipments, some of the affected organizations revealed that personal information might have been affected. “The incident involves two systems used for processing orders from one of Bol’s fulfilment centers. No Bol systems were affected. However, data of customers whose orders were processed via this location may have been viewed or copied,” Bol said.Advertisement. Scroll to continue reading. According to De Bijenkorf, the data breach might involve names, addresses, email addresses, phone numbers, and online order details. For business customers, entity names and identification numbers were potentially exposed, it says. “There are no payment details, bank account numbers (IBANs), credit card information, usernames or passwords involved in this incident,” De Bijenkorf noted. Valve also told customers that the delivery-related information of customers was likely compromised in the attack. The company uses Ceva to ship physical hardware to customers in Europe, and the logistics giant retains shipping information for three months, Valve said, according to multiple Reddit posts. It is unclear how the attackers hacked Ceva’s systems, how many individuals might have been affected, and who was behind the incident. SecurityWeek has emailed Ceva for additional information on the attack and will update this article if the company responds. A subsidiary of CMA CGM Group headquartered in France, Ceva Logistics operates over 1,700 facilities worldwide, providing contract logistics and air, ocean, ground, and finished vehicle transport services in 170 countries. This is not the first time Ceva Logistics has fallen victim to a data breach. Last year, the extortion group Coinbase Cartel claimed two attacks against the company. Related: Corporate Data Stolen in Levi Strauss Cyberattack Related: 3.8 Million Impacted by Unlimited Technology Systems Data Breach Related: 311,000 Impacted by Brown Health Medical Group-MA Data Breach Related: 150,000 Impacted by Madera Community Hospital Data Breach Written By Ionut Arghire Ionut Arghire is an international correspondent for SecurityWeek. Daily Briefing Newsletter Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights. More from Ionut Arghire Adobe Urges Immediate Patching of Critical ColdFusion, Campaign Classic FlawsZoom Patches Zero-Click Code Execution VulnerabilitySAP Patches Critical Code Injection, Memory Corruption VulnerabilitiesCisco Warns of High-Severity ClamAV Vulnerabilities With Public PoC‘Ghostjacking’ Attack Uses Poisoned Logs to Turn AI Agents BadMetabase Patches Vulnerability Exploited as Zero-DayCISA Urges Immediate Patching of Exploited Progress LoadMaster VulnerabilityCorporate Data Stolen in Levi Strauss Cyberattack Latest News Chipmaker Patch Tuesday: Intel, AMD Fix Over 80 Vulnerabilities CombinedOver 2,500 Organizations Impacted by LiteLLM Supply Chain AttackFresh Windows Zero-Day Exploited in North Korean CyberattacksIvanti EPM Update Patches Remotely Exploitable FlawsICS Patch Tuesday: Vulnerabilities Fixed by Siemens, Schneider, Phoenix ContactSonicWall Patches Critical Vulnerabilities in Discontinued GMS PlatformCisco Patches Firewall Zero-Day Exploited for DoS AttacksAugust 2026 Patch Tuesday: Microsoft Fixes 421 CVEs, One Exploited Zero-Day Trending Daily Briefing NewsletterSubscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts. Webinar: Rethinking Cyber Defense for AI-Speed Attacks August 18, 2026 Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default. Register Virtual Event: CodeSecCon 2026 August 19, 2026 CodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps! Register People on the Move1Kosmos has named Frank Cohen Chief Revenue Officer.ServiceNow has appointed Simon Mouyal as Chief Marketing Officer.James Wilkinson has been named Chief Information Security Officer for the City of Dallas.More People On The MoveExpert Insights The AI Governance Gap Is a Leadership Problem: Waiting Won’t Close It Organizations are rushing to implement AI without fully grasping where its legal protections begin and end. (Steve Durbin) Rethinking AI Security: Why CASB and DLP Need an Interaction-Aware Layer Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use. (Etay Maor) Timeless Compliance: Why Better Questions Beat Bigger Frameworks The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change. (Matt Honea) Is Patching Dead? Vulnerability Management in the Post-Mythos Era You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win. (Danelle Au) When Identity Verification Fails: Lessons from a Real-World SIM Swap and Near Account Takeover Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge. (Torsten George) Flipboard Reddit Whatsapp Whatsapp Email

Entities