Pokémon Center’s UK and German websites have notified shoppers that they, too, were hit by the same third‑party data breach that recently affected Valve. The attack on CEVA Logistics at the end of July has now been confirmed to impact not only Valve customers across Europe but also those purchasing Pokémon merchandise.
The company’s apology email, sent roughly five days ago, opened with a blunt statement: “We are sorry to inform you that we have had to cancel your recent order,” citing an “unforeseen fulfilment issue.” The wording felt oddly detached from the cyber incident, yet the message continued in a hybrid American‑British tone.
The notice explains that CEVA Logistics, the firm that ships Pokémon Center products to the UK and Germany, suffered a cyberattack that began on 30 July 2026 and may have compromised customer data.
As a result, the company must cancel the affected orders, acknowledging the disappointment this causes and offering a sincere apology for the inconvenience.
The breach has exposed a trove of personal data—including full names, delivery addresses, phone numbers, email addresses, and the contents of shipments—placing affected customers at high risk of phishing attacks.
While The Pokémon Company (TPCi) is expected to notify those whose information may have been compromised, the simultaneous cancellation of orders has left many bewildered. Buyers report that items they had already purchased are now out of stock or will not arrive in time for special occasions.
In a frustrating turn of events, the Pokémon Center’s response has been notably unhelpful. One customer, after having their order cancelled, reached out to confirm whether re‑ordering would be safe or if it would face the same fate. The reply offered a generic apology but failed to address the specific concern, ending with a statement that no further information could be provided and the ticket was closed.
We have contacted TPCi to seek clarity on the cancellations and to advise affected customers on next steps. This comes amid a period when the Pokémon Center’s website is already struggling to handle demand, forcing customers into hours‑long queues to access the platform—only to find new releases sold out within the first 15 minutes. The situation is poised to worsen with the upcoming launch of the 30th Anniversary set, which is projected to generate unprecedented demand.
❓ Frequently Asked Questions (FAQ)
What caused the order cancellations for Pokémon Center customers in the UK and Germany?
The cancellations were triggered by a cyberattack on CEVA Logistics, the third‑party logistics partner that ships Pokémon Center products to those regions. The breach, which began on 30 July 2026, compromised customer data and disrupted fulfillment, forcing Pokémon Center to cancel affected orders.
Which data was compromised in the CEVA Logistics breach, and how does it affect customers?
The breach exposed a trove of personal information, including full names, delivery addresses, phone numbers, email addresses, and the contents of shipments. This puts customers at risk of phishing attacks and other privacy violations, as attackers could use the data to target them or impersonate legitimate communications.
What steps are Pokémon Center and CEVA Logistics taking to address the breach and prevent future incidents?
Pokémon Center has issued a formal apology and is working with CEVA Logistics to investigate the breach, secure affected systems, and notify impacted customers. Both companies are reviewing and tightening their security protocols, enhancing data protection measures, and improving communication strategies to restore consumer trust and reduce the likelihood of similar incidents.
News Source: Kotaku
Comments
Be the first to comment.