As spotted by Bleeping Computer (via Eurogamer), the Pokémon Center website for both the UK and Germany has informed customers that it has been affected by the same third-party data breach that recently hit Valve. CEVA Logistics was hacked at the end of July, and it’s only now coming to light that this not only affected Valve customers in Europe, but also those picking up Pokémon products too. But in an odd and salt-in-the-wound twist, the Pokémon Center is informing affected customers that their orders have been cancelled.
“We are sorry to inform you that we have had to cancel your recent order,” says the email sent out around five days ago to affected customers, “due to an unforeseen fulfilment issue.” Which is a peculiar way to start a message about a hack. However, the email continues (in a peculiar mix of American and British English),
We are writing to let you know about a cyber incident affecting a Pokémon Center logistics provider that may affect some of your information. CEVA Logistics, the vendor Pokémon Center utilizes to ship product from PokemonCenter.com for customers in the United Kingdom and Germany, has informed us that unfortunately they were the victim of a cyber attack commencing on 30 July, 2026.
Due to this incident we need to cancel your order. We understand this is disappointing, especially after you’ve taken the time to place an order with us, and we sincerely apologise for the inconvenience.
The data affected appears to include full names, delivery addresses, phone numbers, email addresses, and the content of the delivery. This obviously makes those in the breach extremely vulnerable to phishing scams.
While it’s obvious that The Pokémon Company (TPCi) needs to reach out to customers whose data has potentially been breached, it’s hard to understand why it would also cancel their order. Customers are reporting that products they’d bought and then lost are now out of stock, or now cannot arrive in time for birthdays.
The Pokémon Center has managed to be even more unhelpful to some. One person whose order was cancelled reached out to the store to ask if it was safe for them to re-order, or if that would get cancelled too. The reply stated, “We understand you may have concerns or frustrations regarding this situation and apologise for any inconvenience caused,” but then immediately caused more inconvenience by not answering the question. “Pokémon Center Support does not have any further information to share on this topic,” and then declared it was closing the ticket.
We’ve reached out to TPCi to ask why the cancellations are happening, and what affected customers should do. This all comes at a time when the Pokémon Center websites are unable to cope with customer demand, creating hours-long queues to even access the sites that inevitably sell out of new products in the first 15 minutes. And it’s about to get so much worse with the imminent release of the 30th Anniversary set, which is going to create more demand than anything we’ve seen before.
