I mean they do this in the USA too and we are a shit hole country apparently.

You bet your ass they would’ve done this Because their first fucking sentence is to blame a European company for it. They would have absolutely sent that email no matter what in this case. They did Not do it out of the goodness of their heart regardless, because they took the opportunity to immediately place the blame, where it belongs, on another company. They would have sent this email out, no matter what. There are no laws in Europe that made it so this happened.

Maybe the company that’s at fault letting you know is doing that because they are afraid of legal implications. But valve is going to tell you that it’s some other asshole‘s fault no matter who told them they had to or not.

Nothing. It’s just a game of chance at this stage given how many intermediaries are necessary between where you order something and who needs to know where to deliver it. Each step in that long ass process can eventually fail. It takes one to get your information out - and in this case it’s not like you can move or change your name as a measure compared to when some online only service fails you.

There are quite few things you can do, depending on where you live:

• Do not put your real name or address into the forms if possible.
• Use temporary phone number.
• Use alias email address and change it if it gets leaked.

Learn from it.

it was eight warehouses - and warehousing/ middle mile logistics is very fraught with give and take

we don't know what happened but freightwaves is reporting it was at the warehouse level so I'm guessing it was at the consolidation/LTL stage - meaning it was warehousing that has recieved the inventory and is working out how and where to get it to the address

knowing they run a proprietary blend of cargowise freight tech it's likely the hackers got access to a regional managers account, probably pretty low on the totem pole