Controversies
Controversies tied to this brand in public sources. A listing is not a finding of fault.
Back to profile1 entries
2026
Pokémon Center customer data exposed in CEVA Logistics cyberattack
Safety incident
Pokémon Center, the official merchandise site for the Pokémon brand, canceled orders in Europe after hackers stole customers' personal and order information in a cyberattack against third-party logistics provider CEVA Logistics that commenced on July 30, 2026. Affected customers in the United Kingdom and Germany may have had full names, mailing addresses, phone numbers, email addresses, and order details obtained. CEVA Logistics is a logistics company under CMA CGM, and the leak affected eight warehouses across Europe, also impacting companies including Dutch retailer Bol, football club Ajax, ING Bank, and eyeglass maker Ace & Tate.
Company response
Ongoing disclosure — Pokémon Center
We are writing to let you know about a cyber incident affecting a Pokémon Center logistics provider that may affect some of your information.
Refund or compensation — Pokémon Center
We’re sorry to inform you that we have had to cancel your recent order [order number] due to an unforeseen fulfillment issue.
Source excerpt
The data leak has affected eight warehouses across Europe, impacting a wide range of companies, including Dutch retailer Bol, football club Ajax, ING Bank, and eyeglass maker Ace & Tate, among others.
CEVA Logistics (“CEVA”), the vendor Pokémon Center utilizes to ship product from PokemonCenter.com for customers in the United Kingdom and Germany, has informed us that unfortunately they were a victim of a cyber attack commencing on 30 July, 2026.