Ceva Logistics, a leading player in the shipping and logistics sector, experienced significant operational disruptions across its European facilities following a cyberattack. The incident, which began on July 29, has affected eight key warehouses, causing a major setback in their service operations.
Impact on Operations and Customers
By August 1, Ceva had reached out to its customer base to inform them of the breach and its implications. The disruption has halted the shipping of goods from the compromised warehouses, significantly impacting several organizations including Dutch retailers Bol and De Bijenkorf, financial institution ING, eyewear brand Ace & Tate, Amsterdam’s football club Ajax, and gaming company Valve.
In the wake of the attack, these affected entities have cautioned that personal data might have been exposed. Bol clarified that while their internal systems were unaffected, customer data processed through one of their fulfillment centers could have been accessed or duplicated.
Details of the Data Breach
De Bijenkorf provided more specifics, indicating that the potential breach includes customers’ names, addresses, email addresses, phone numbers, and details of online orders. For business clients, additional data such as entity names and identification numbers may have been compromised. Importantly, they confirmed that no financial information, such as bank details or credit card numbers, was compromised.
Valve, a major client of Ceva for hardware shipments in Europe, also warned users that delivery-related data might have been accessed. The logistics company retains such information for a period of three months, increasing concerns about potential data exposure.
Ongoing Investigation and Company Response
The precise method used by the attackers to breach Ceva’s systems remains unknown, as does the exact number of affected individuals. Ceva, a subsidiary of the CMA CGM Group based in France, operates worldwide with extensive logistics services in over 170 countries.
This incident is not an isolated case for Ceva Logistics. Previously, an extortion group named Coinbase Cartel claimed to have conducted two attacks on the company. Ceva is currently under scrutiny to enhance its cybersecurity measures to prevent future occurrences.
The company has been contacted for further comment and updates will be provided as more information becomes available. As the situation develops, affected customers are encouraged to stay informed and take any necessary steps to protect their personal data.
