Pokémon Center Customer Data Exposed in CEVA Logistics Supply-Chain Breach

Pokémon Center told customers in the United Kingdom and Germany that personal and order information was exposed after a cyberattack on CEVA Logistics, the third-party shipping provider handling deliveries in those countries. The attackers reportedly breached CEVA systems between late July and early August, exposing customer names, mailing addresses, phone numbers, email addresses, and order contents. Payment card data and Pokémon Center account information were not affected, as CEVA did not have access to that information.

The intrusion also disrupted fulfillment operations, causing shipping delays and the cancellation of some Pokémon Center orders. CEVA said the attack affected part of its European contract logistics environment and disrupted at least eight warehouses across Europe, with reports indicating other retailers were also impacted. Dutch data protection authorities and law enforcement are investigating, underscoring the wider supply-chain risk created when logistics providers are compromised.