CEVA Breach Exposes Pokémon Center Customer and Order Information
Summary
Pokémon Center says a cyberattack on logistics provider CEVA exposed UK and German customers’ contact and order details. Payment-card data was not accessible, while warehouse disruption caused delays and some order cancellations.
Key points
- Pokémon Center says CEVA Logistics informed it of a cyber incident commencing July 30, 2026.
- Unauthorized parties may have obtained customers’ names, mailing addresses, phone numbers, email addresses, and order contents.
- Pokémon Center says payment-card details and other customer and order information were not affected.
- The attack disrupted eight European warehouses, causing shipping delays and some order cancellations; the reason for the cancellations was unclear.
- CEVA’s incident also affected other retailers in Europe, including Valve, which reported exposure of Steam hardware customers’ contact and order information.
Article Details
- Victim Organization
- CEVA Logistics; Pokémon Center customer data was affected
- Incident Type
- Cyberattack and data breach at a third-party logistics provider
- Incident Date
- 2026-07-30
- Data Types Exposed
- Full names
- Mailing addresses
- Phone numbers
- Email addresses
- Order details, including order contents
- Operational Impact
- The attack disrupted eight European warehouses, caused shipping delays, and was associated with cancellations of some Pokémon Center orders.
- Claim Status
- confirmed
Vendors
Countries
GermanyPokémon Center is notifying customers in the United Kingdom and Germany that a third-party breach at CEVA Logistics exposed personal details and order information from PokemonCenter.com shipments.United KingdomPokémon Center is notifying customers in the United Kingdom and Germany that a third-party breach at CEVA Logistics exposed personal details and order information from PokemonCenter.com shipments.