by 
In August, we reported that Valve was sending out emails in relation to a cyber attack on CEVA Logistics, which handles Steam Hardware shipments (amongst many other goods).
In short, at that time it looked possible that Steam customer data had been stolen by attackers, and Valve was warning Steam Hardware buyers could expect to receive scam messages trying to solicit fraudulent payments or additional information.
Over a month later, it now appears that the attackers did not access servers used for Steam Hardware shipments, and therefore owners of Steam Controller and Steam Machine consoles can rest easy - somewhat.
Here's the Valve email in full:
We are writing to provide an update to our August 10 email regarding the recent cyberattack on CEVA Logistics.
While CEVA has not yet concluded their full internal investigation, we have learned that the attack was limited to a subset of their systems. In particular, the system that processed your Steam hardware order was not affected. There is currently no indication that your data was accessible to the attacker at any time during this incident.
We are sorry for the delay while this was confirmed and apologize for any confusion or alarm that resulted from our prior notification. If you have any remaining questions or concerns, please feel free to contact Steam Support.
For what it's worth, it still seems like many other CEVA Logistics partners were affected. As well as receiving this Valve email, I also received an email from a completely different company earlier today stating that "personal data... stored on the affected systems was accessed and copied by a third party".
Therefore, it may be worth checking your own emails for "CEVA Logistics" to see if your personal information is likely to be at risk.
As always, be on guard, practice good internet hygiene and trust no one. Keep it secret, keep it safe.