Cyber Security NewsData Breach 2 min.Read Pokémon Center Data Breach Exposes Customers’ Personal and Order Data By Divya August 18, 2026 Pokémon Center has begun notifying customers in the United Kingdom and Germany that personal information from their online orders was exposed following a cyberattack on CEVA Logistics, its third-party fulfillment partner. The retailer clarified that the incident did not originate from Pokémon Center’s own systems or website. Instead, attackers compromised the systems CEVA uses to process delivery information for retail customers, exposing data associated with orders placed on PokémonCenter.com.
As a result, Pokémon Center was forced to cancel an undisclosed number of pending orders. Pokémon Center Data Breach In notifications sent to affected customers, Pokémon Center apologized for the recent cancellations, describing them as arising from an “unforeseen fulfillment issue.” The company later clarified that the disruption was linked to the cyberattack on CEVA Logistics, which reportedly began on July 30, 2026. CEVA’s compromised systems contained delivery-processing information necessary for fulfillment operations in the UK and Germany.
Pokémon Center stated that its logistics partner informed it that customer data had been affected by the broader incident. Pokémon Center Data Breach The potentially affected records include customers’ full names, postal addresses, telephone numbers, email addresses, and details about their Pokémon Center orders. While Pokémon Center emphasized that payment card data was not compromised, the exposed information could still be valuable to fraudsters.
CEVA reportedly does not process or store customers’ card details, and Pokémon Center has asserted that other account information was not impacted. However, attackers could utilize legitimate order details, merchandise descriptions, and delivery addresses to create convincing phishing campaigns, fraudulent refund requests, or courier-themed text-message scams. Pokémon Center’s UK website has displayed an advisory warning customers about delays in processing, dispatch, and delivery of some orders.
However, several customers have reported full cancellations instead of routine fulfillment delays. According to CSN, the company has not explained why certain affected purchases could not be processed after the breach, whether the decision to cancel orders was related to warehouse operations, or how many orders were impacted. Customers are advised to independently verify any alleged shipment updates, replacement requests, refund notifications, or delivery-fee demands through the official Pokémon Center website, rather than clicking on links in unsolicited messages.
This exposure appears to be part of a broader incident at CEVA Logistics that is affecting European contract logistics operations. CEVA informed customers on August 1 that a cyber intrusion had disrupted parts of its European business and affected at least 8 warehouses. The company stated that the operational impact was contained to those sites and that its other global systems remained unaffected.
Reports also indicate that customer information from banks, retailers, and gaming companies, including Steam operator Valve, may have been involved in the incident. Valve similarly stated that passwords and payment credentials were not exposed since CEVA did not have access to them. Dutch data-protection authorities and law enforcement agencies are currently investigating the matter.
At the same time, CEVA has not publicly identified the initial access method or attributed the attack to any known threat actor. This incident highlights the supply-chain risks created when major retailers centralize fulfillment data with logistics providers. A compromise at one vendor can expose operational and customer information across multiple downstream brands, even when those brands’ customer-facing platforms remain secure.
Stop new phishing & malware before they compromise your business. Integrate live intel from 15K SOCs around the world Tagscyber securityCyber Security NewsData Breach DivyaDivya is a Senior Journalist at GBhackers covering Cyber Attacks, Threats, Breaches, Vulnerabilities and other happenings in the cyber world. Hot this week Infosec- Resources How To Access Dark Web Anonymously and know its Secretive and Mysterious Activities June 4, 2023 1 What is Deep Web The deep web, invisible web, or...
SOC Architecture How to Build and Run a Security Operations Center (SOC Guide) – 2023 June 3, 2023 12 Today’s Cyber security operations center (CSOC) should have everything... Cyber Security News Russian Hackers Bypass EDR to Deliver a Weaponized TeamViewer Component October 18, 2023 0 TeamViewer's popularity and remote access capabilities make it an... Checklist Web Server Penetration Testing Checklist – 2026 January 6, 2026 0 Web server pentesting is performed under three significant categories: identity,...
Infosec- Resources ATM Penetration Testing – Advanced Testing Methods to Find The Vulnerabilities June 4, 2023 4 ATM Penetration testing, Hackers have found different approaches to... TopicsAcquisitionAdobeAdwareAIAmazonAmazon AWSAMDAndroidAnti VirusAntimalwareANY RUNApacheAPIAppleAPTArtificial IntelligenceAvastAWSAzureBackdoorBitcoinBluetoothBotnetBrowserBuffer over flowBug BountyBusinessChatbotsChatGPTChecklistChromeCiscoCISOCISO AdvisoryCloudCloud SecurityCloudflareComputer SecurityCourseCPUCross site ScriptingcryptocurrencyCryptocurrency hackCVE/vulnerabilityCyber AdvisoryCyber AICyber AttackCyber Crimecyber securityCyber security CourseCyber Security NewsCyber Security ResourcesCybersecurity NewsletterDark WebData BreachData GovernanceDDOSDealsDeepSeekDiscordDNSDos AttackDriveDropboxEducationEmailEmail SecurityEthical HackingExploitExploitation ToolsExtratorrentsFACEBOOKFeaturedFirefoxFirefox NewsFirewallForensics ToolsgameGenAIGitHubGitLabGmailGoogleGoogle dorksGovernanceGRCHacking BooksHacksHardware HackingHBOHTMLHTTPIBMIISIncident ResponseInformation GatheringInformation Security RisksInfosec- ResourcesInsider ThreatsInstagramMore cyber security Shadow hVNC Malware Kit Gives Hackers Hidden Windows Desktop for Covert Remote Control 0 A newly advertised malware-as-a-service toolkit named Shadow hVNC combines... cyber security VMware vCenter RCE Gives Attackers a Path From One Appliance to Entire Virtual Infrastructure 0 A critical VMware vCenter vulnerability is being actively exploited... CVE/vulnerability PoC Exploit Released for Microsoft SCCM Vulnerability Enabling SYSTEM-Level Code Execution 0 A recently disclosed proof-of-concept (PoC) exploit for Microsoft Configuration...
Press Release OpenMatter Network to Take Verification Message to Belgrade Blockchain Week 2026 0 Melbourne, Florida, August 17th, 2026, CyberNewswire Head of Operations and... cyber security Misconfigured Microsoft Power Pages Likely Exposed 27 Million Records to ExfilSquad 0 A suspected Microsoft Power Pages configuration failure has been... cyber security HoneyMyte Upgrades CoolClient With Windows Kernel Rootkit to Hide Malware and C2 Connections 0 HoneyMyte, the China-aligned espionage group also tracked as Mustang... cyber security Malicious Google Apps Script Profiles Crypto Victims Before Delivering Signed Windows Malware 0 A targeted cryptocurrency intrusion has exposed how Google-hosted Apps... CVE/vulnerability GeoServer Pre-Auth SQL Injection Flaw Lets Attackers Gain Remote Code Execution 0 A newly disclosed SQL injection vulnerability in GeoServer allows... Related Articles Shadow hVNC Malware Kit Gives Hackers Hidden Windows Desktop for Covert Remote Control cyber security August 18, 2026 VMware vCenter RCE Gives Attackers a Path From One Appliance to Entire Virtual Infrastructure cyber security August 18, 2026 PoC Exploit Released for Microsoft SCCM Vulnerability Enabling SYSTEM-Level Code Execution CVE/vulnerability August 18, 2026 Misconfigured Microsoft Power Pages Likely Exposed 27 Million Records to ExfilSquad cyber security August 17, 2026 HoneyMyte Upgrades CoolClient With Windows Kernel Rootkit to Hide Malware and C2 Connections cyber security August 17, 2026 Recent News Shadow hVNC Malware Kit Gives Hackers Hidden Windows Desktop for Covert Remote Control Mayura Kathir - August 18, 2026 VMware vCenter RCE Gives Attackers a Path From One Appliance to Entire Virtual Infrastructure Mayura Kathir - August 18, 2026 PoC Exploit Released for Microsoft SCCM Vulnerability Enabling SYSTEM-Level Code Execution Divya - August 18, 2026 OpenMatter Network to Take Verification Message to Belgrade Blockchain Week 2026 CyberNewswire - August 17, 2026 Misconfigured Microsoft Power Pages Likely Exposed 27 Million Records to ExfilSquad Mayura Kathir - August 17, 2026 HoneyMyte Upgrades CoolClient With Windows Kernel Rootkit to Hide Malware and C2 Connections Mayura Kathir - August 17, 2026