Pokémon Center Confirms Data Breach – Hackers Stole Customers’ Personal Data
Brief
Pokémon Center has begun notifying customers in the United Kingdom and Germany that their personal information was exposed in a third-party data breach, and that the incident has forced the company to cancel a batch of pending orders.
The retailer confirmed that the exposure did not originate on its own website but instead traced back to CEVA Logistics , the shipping vendor Pokémon Center relies on to fulfill Pokémon Center orders across the UK and Germany.
In breach notification emails sent to affected shoppers, Pokémon Center apologized for canceling recent orders “due to an unforeseen fulfilment issue,” before explaining the real cause: a cyberattack against its logistics partner. According to the notice, CEVA Logistics informed Pokémon Center that it had been the victim of a cyberattack that began on 30 July 2026.