The official Pokémon Center platforms in the United Kingdom and Germany have cancelled all pending merchandise orders following a July 30 cyber attack on third-party logistics provider CEVA Logistics that compromised sensitive customer data.

Compromised Data and Scope

The security breach exposed full names, delivery addresses, telephone numbers, email addresses, and specific order contents. CEVA Logistics, which also manages European fulfillment for Valve, confirmed that the intrusion compromised logistics infrastructure used by multiple major entertainment and gaming corporations. Affected buyers began receiving automated cancellation notices citing unforeseen fulfillment failures directly linked to the security incident.

Impact on 30th Anniversary Releases

The cancellations directly disrupt distribution for major upcoming merchandise, including pre-ordered items tied to the franchise's 30th Anniversary celebrations. Because inventory allocations have been scrapped rather than delayed, buyers face immediate stock shortages and cannot reorder sold-out anniversary items. Furthermore, the exposure of personal contact details and order histories leaves impacted consumers at high risk of targeted phishing campaigns utilizing legitimate purchase data.