CEVA Logistics confirms that employee data was exposed in recent cyberattack
The hackers even got information on workers’ shoe sizes.
A CEVA Logistics warehouse. Graham Hughes/Bloomberg via Getty Images
- CEVA says attackers copied personal and work data from current and former employees.
- Exposed records may include IDs, Social Security numbers, bank details, family details, salary data, and absence records.
- The number of affected employees remains unclear, and external cybersecurity experts are still investigating.
- CEVA says multiple compromised user accounts have been deactivated after the breach.
Key Takeaways by nexos.ai, reviewed by Cybernews staff.
The breach at CEVA Logistics continues to expand. Not only has data belonging to CEVA's logistics partners been stolen, but personal information of current and former CEVA employees has also been taken.
In an internal CEVA email sent to current and former personnel, the company states that the attackers have copied both personal and work-related information.
This includes names, dates of birth, marital status, home addresses, email addresses, telephone numbers, Social Security numbers, copies of identity cards, details of partners and children, emergency contact information, salary information, bank account details, pension information, notes from individual meetings, and absence records.
Fun fact: even workers’ shoe sizes were stored on CEVA’s servers.
However, CEVA emphasizes in the email that not all categories of information have been compromised for all current and former workers. This varies for each staff member.
The number of employees affected by the data breach remains unclear.
According to BNR, the Dutch news outlet that first reported on CEVA’s internal email, the company states that multiple user accounts were compromised during the breach and have since been deactivated.
Stay updated with our latest stories and follow us on social media
Be the first to discover new stories, ideas, and updates from our team.
The breach has been reported to the Dutch data protection authority, and the investigation into the security incident is still ongoing. Additional research is being conducted by external cybersecurity experts.
CEVA Logistics is a global logistics and supply chain company that operates in both freight management and contract logistics. The company was founded in 2007 and purchased by the CMA CGM group in 2019.
CEVA Logistics has over 1,300 locations worldwide and employs over 110,000 workers. The company generated over $18.3 billion in revenue in 2025.
Earlier this month, numerous businesses announced that customers’ personal data may have been leaked because of a security incident at CEVA Logistics, including Dutch department store De Bijenkorf, online retailer bol, soccer club Ajax, financial institution ING, optician chain Ace & Tate, video game developer and publisher Valve, and Pokémon merchandise seller the Pokémon Center.
