The Pokémon Center has informed customers in the UK and Germany that their personal and order information may have been exposed as a result of a data breach affecting its shipping partner, CEVA Logistics. This incident follows a similar breach that impacted Valve's Steam hardware customers in Europe.
CEVA Logistics, a shipping partner for the Pokémon Center in Europe, experienced a cyberattack between July 29 and August 1. The breach potentially exposed customer names, mailing addresses, phone numbers, email addresses, and details about their orders, including contents. However, payment and card details were not compromised, as this information is not shared with CEVA Logistics.
In response to the breach, the Pokémon Center has canceled orders placed by affected customers. This decision impacts individuals who ordered merchandise from the official online store in the UK and Germany. While customers can reorder items, there is no guarantee that desired products will remain in stock. The timing of the breach is particularly unfortunate, as some canceled orders included sought-after Pokémon 30th anniversary products.
Customers who placed orders with the Pokémon Center in the affected regions are receiving email notifications similar to those sent to Valve's customers. In addition to the data exposure, the breach is causing shipping delays for the Pokémon Center UK website. A message on the site states, "We are currently experiencing delays in processing and shipping orders. Some orders may take longer than usual to be dispatched and delivered."