Cyberattack Halts Shipments at Ceva Logistics’ European Hubs

On July 29 a cyberattack halted shipments from eight Ceva Logistics warehouses across Europe, leaving goods in those sites unable to ship. Ceva notified affected customers on Aug. 1 and is working to restore the impacted services.

Several organizations reported disruptions or received notices, including Dutch retailers Bol and De Bijenkorf, banking group ING, eyewear retailer Ace & Tate, Amsterdam football club Ajax and game company Valve. Orders processed at the affected facilities have been delayed.

Bol warned customers that the incident “involves two systems used for processing orders from one of Bol’s fulfilment centers. No Bol systems were affected. However, data of customers whose orders were processed via this location may have been viewed or copied.”

De Bijenkorf’s notice said names, addresses, email addresses, phone numbers and online order details could have been exposed, and that business customers’ entity names and identification numbers might have been seen. The retailer added: “There are no payment details, bank account numbers (IBANs), credit card information, usernames or passwords involved in this incident.”

Valve informed customers that delivery-related information was likely compromised. Valve uses Ceva to ship physical hardware to customers in Europe, and the logistics provider retains shipping information for a limited period.

It remains unclear how attackers accessed Ceva’s systems, how many individuals may have been affected or who is responsible. Security teams at Ceva and at impacted companies are assessing the scope of the breach and working to restore normal operations at the affected warehouses.

Ceva is a subsidiary of CMA CGM Group and operates more than 1,700 facilities worldwide, providing contract logistics and air, ocean, ground and finished vehicle transport services in about 170 countries. Last year an extortion group claimed responsibility for two attacks on Ceva.