The official Pokémon Center online store has experienced a data breach that exposed customer information, leading to the cancellation of some orders in Europe. The incident was the result of a cyberattack on CEVA Logistics, a third-party company responsible for fulfilling orders for Pokémon Center customers in the United Kingdom and Germany.
The attack, which began on July 30, 2026, reportedly allowed hackers to access customers' full names, mailing addresses, phone numbers, email addresses, and order details. The Pokémon Center has informed affected users via email about the incident, citing an "unforeseen fulfillment issue" as the reason for order cancellations. Customers in the UK may also experience delays in order processing, dispatch, and delivery.
This data leak comes at a notable time for the Pokémon brand, as the Pokémon Center is currently celebrating its 30th anniversary with a wide range of themed merchandise, including posters, keychains, and apparel.
CEVA Logistics, a subsidiary of the global shipping corporation CMA CGM, has confirmed that the cyberattack impacted eight warehouses across Europe. This breach has affected numerous other companies beyond the Pokémon Center, including Dutch retailer Bol, football club Ajax, ING Bank, and eyeglass maker Ace & Tate, among others. Reports indicate an increase in cyberattacks targeting the global cargo industry in recent years, with some incidents resulting in shipments being rerouted to criminal organizations.