Gotta catch ‘em all: Pokémon Center caught in CEVA Logistics breach
The breach caused some orders to be cancelled.

Photo by Yuriko Nakao/Bloomberg via Getty Images.
- Pokémon Center confirmed customers in Germany and the UK were affected by a data breach at logistics partner CEVA Logistics.
- Exposed data includes full names, postal addresses, emails, phone numbers, and order histories, but not payment or login details.
- The breach caused some Pokémon Center orders to be canceled or delayed, and the total number of affected customers is unclear.
- CEVA Logistics' breach has also hit De Bijenkorf, bol, Ajax, ING, Ace & Tate, and Valve in recent weeks.
Key Takeaways by nexos.ai, reviewed by Cybernews staff.
Pokémon merchandise seller the Pokémon Center has confirmed that it is the latest victim of the data breach at third-party supplier CEVA Logistics.
The Pokémon Center has begun notifying customers in Germany and the United Kingdom that their personal information may have been stolen due to recent events at its logistics partner, CEVA Logistics.
“We’re sorry to inform you that we had to cancel your recent order due to an unforeseen fulfillment issue,” an email to affected customers says, which has been seen by Cybernews.
The message mentions a security incident at CEVA Logistics, the vendor that the Pokémon Center uses to ship products from its web store to customers in Germany and the United Kingdom.
“To fulfill your Pokémon Center orders, CEVA receives delivery-related information to ship your Pokémon Center products,” the message continues.
Personal information that may have been seen or copied includes full names, postal addresses, email addresses, phone numbers, and order purchase histories.
Other customer-related information, such as payment card details and login credentials, hasn’t been impacted because CEVA doesn’t have access to this data.
Anyone visiting the Pokémon Center website in Germany or the United Kingdom will see a prompt that says that orders will be delayed.
Stay updated with our latest stories and follow us on social media
Be the first to discover new stories, ideas, and updates from our team.
“We are currently experiencing delays in processing and shipping orders. Some orders may take longer than usual to be dispatched and delivered. We apologize for the inconvenience and appreciate your patience,” the message says.
Some people are expressing their disappointment because the Pokémon Center canceled their order.
The number of customers affected remains unclear.
Earlier this month, numerous businesses announced that customers’ personal data may have been leaked because of a security incident at CEVA Logistics, including Dutch department store De Bijenkorf, online retailer bol, soccer club Ajax, financial institution ING, optician chain Ace & Tate, and video game developer and publisher Valve.