Pokémon Center cancels orders after customer data exposed in breach

A cyberattack on a major European logistics provider has forced Pokémon Center to cancel customer orders and exposed personal data for shoppers in the United Kingdom and Germany. The breach, which targeted CEVA Logistics, a shipping partner for the official Pokémon merchandise store, has also impacted other major companies, including video game distributor Valve.

According to notifications sent to affected customers, CEVA Logistics informed Pokémon Center that it was the victim of a cyberattack that began on July 30, 2026. The intrusion compromised systems used to process delivery information, leading to the exposure of customer records. Pokémon Center confirmed that unauthorized parties may have accessed full names, mailing addresses, phone numbers, email addresses, and details about the contents of orders placed on PokémonCenter.com. The company emphasized that payment card details were not affected, as CEVA does not have access to that information.

As a result of the incident, Pokémon Center has canceled pending orders for affected customers. In an email to shoppers, the company apologized for the cancellations, stating, "Due to this incident, we need to cancel your order. We...