Data Breach Affects Pokémon Center Customers, Leading to Canceled Orders

A significant data breach has put customer information at risk. Pokémon Center, the official merchandise hub for the Pokémon brand, has had to cancel orders in Europe after hackers compromised personal and order details.

The breach occurred during a cyberattack on CEVA Logistics, a third-party logistics provider. Valve also experienced issues from the same leak and previously alerted users about potential scam messages related to the Steam Machine and Steam Controller.

This incident, which took place in late July, has impacted Pokémon Center customers in the United Kingdom and Germany.

Reports indicate that affected users received emails from Pokémon Center stating:

We regret to inform you that we have had to cancel your recent order [order number] due to an unforeseen fulfillment issue.

We are reaching out to inform you about a cyber incident involving a logistics provider for Pokémon Center that may affect some of your information. CEVA Logistics (“CEVA”), the vendor Pokémon Center uses to ship products from PokemonCenter.com for customers in the United Kingdom and Germany, has notified us that they were unfortunately targeted in a cyber attack starting on July 30, 2026.

Pokémon Center has warned customers that hackers may have accessed their full names, mailing addresses, phone numbers, email addresses, and order details. A notice on the Pokémon Center website indicates that users in the U.K. might experience delays, with orders taking longer to process, dispatch, and deliver. Reports suggest that some customers have had their orders canceled. This news comes at a particularly unfortunate time, as Pokémon Center is currently celebrating its 30th anniversary, featuring over 100 themed items on its site, including posters, keychains, clothing, and more.

CEVA Logistics is part of CMA CGM, the world’s third-largest container shipping company. The data breach has affected eight warehouses across Europe, impacting various businesses, including Dutch retailer Bol, football club Ajax, ING Bank, and eyeglass maker Ace & Tate, among others. Cyberattacks on the global cargo industry have reportedly surged in recent years, with hackers sometimes redirecting shipments to criminal organizations.

European users should remain vigilant for fraudulent emails regarding recently purchased Steam hardware.