Pokemon Center Hit By Data Breach That Leaks Customer Information

You’ve probably heard this before: A major data breach has exposed customer information. Pokémon Center, the official merchandise site for the Pokémon brand, has canceled orders in Europe after hackers stole customers’ personal and order information.

Hackers stole the data in a cyberattack against a third-party company, CEVA Logistics. Valve was affected by the same leak and previously warned about scam messages related to the Steam Machine and Steam Controller.

The attack, which happened in late July, has reportedly affected Pokémon Center customers in the United Kingdom and Germany.

BleepingComputer reports that it received emails that The Pokémon Center sent to affected users, which read as follows:

We’re sorry to inform you that we have had to cancel your recent order [order number] due to an unforeseen fulfillment issue.

We are writing to let you know about a cyber incident affecting a Pokémon Center logistics provider that may affect some of your information. CEVA Logistics (“CEVA”), the vendor Pokémon Center utilizes to ship product from PokemonCenter.com for customers in the United Kingdom and Germany, has informed us that unfortunately they were a victim of a cyber attack commencing on 30 July, 2026.

Pokémon Center told customers that hackers may have obtained their full names, mailing addresses, phone numbers, email addresses, and order details. A banner on the Pokémon Center website says that U.K.-based users may experience delays and that orders may take longer to process, dispatch, and deliver. According to BleepingComputer, some customers reportedly had their orders canceled. The news comes at a particularly bad time, as Pokémon Center is in the middle of its 30th-anniversary celebration, with over 100 themed items on its site, such as posters, keychains, clothing, and more.

CEVA Logistics is a logistics company under CMA CGM, the world's third-largest container shipping corporation. The data leak has affected eight warehouses across Europe, impacting a wide range of companies, including Dutch retailer Bol, football club Ajax, ING Bank, and eyeglass maker Ace & Tate, among others. Cyberattacks against the global cargo industry have reportedly increased in recent years, with hackers sometimes redirecting shipments directly to criminal organizations.