CEVA Logistics Breach Exposes Data of Ajax and Major Dutch Retailers
A cyberattack on the global supply chain giant highlights the systemic risk of third-party logistics vulnerabilities.
Global supply chain provider CEVA Logistics has suffered a cyberattack that compromised the data of several high-profile partners. The breach underscores the growing security risks inherent in centralized logistics hubs, where a single point of failure can expose the personal information of millions of end-users across unrelated industries.
Unauthorized individuals gained access to CEVA's systems, impacting third-party partners including the Dutch football club Ajax and major Dutch retailers bol and De Bijenkorf. The potentially exposed data includes customer names, postal addresses, email addresses, phone numbers, and order histories. In response, Ajax reported the incident to the Dutch data protection authority as a precautionary measure and has temporarily suspended all data transfers with CEVA Logistics.
The Supply Chain Risk
CEVA Logistics, a subsidiary of the CMA CGM group, operates as a massive backend engine for global commerce. As part of a logistics division that reported revenue of approximately $18 billion in 2025 and employs roughly 110,000 people, CEVA represents a critical node in the global supply chain.
When a third-party logistics (3PL) provider of this scale is compromised, it creates a "blast radius" effect. In this instance, companies like Ajax and bol were not directly hacked, yet their customer data was compromised because it resided on CEVA's servers. This systemic vulnerability allows attackers to pivot from a single service provider to access the data of dozens of disparate clients simultaneously.
Industry Implications
This incident highlights a critical vulnerability in modern commerce: the reliance on centralized 3PL providers. For the retail and sports sectors, the breach risks the privacy of millions of customers and threatens operational stability. Because these organizations rely on a single provider for order fulfillment, a security lockdown or system failure at the hub can lead to immediate disruptions in how goods are moved and processed for the end consumer.
What's Next
While the immediate focus remains on data containment and regulatory reporting, the industry is watching how CEVA and CMA CGM harden their infrastructure to prevent similar incursions. It remains to be seen if further partners will report data losses or if the breach will trigger a broader shift in how major retailers audit the cybersecurity protocols of their logistics partners.