Pokemon Center's UK store is canceling orders after its shipping partner got hacked.
CEVA Logistics, which ships Pokemon Center orders to customers in the UK and Germany, was hit by a cyberattack starting July 30, 2026. Pokemon Center emailed affected customers citing an "unforeseen fulfilment issue" and canceled some recent orders outright. The data likely exposed includes names, addresses, phone numbers, emails, and order history, but not account credentials or payment details. Around a dozen organizations tied to CEVA have confirmed they were hit, and no group has claimed responsibility yet.
This is a supply-chain breach, not a Pokemon Center breach. The company's own systems were never touched, yet its customers still got exposed because a vendor several steps removed got compromised. That is the recurring lesson of 2026: your security posture is only as strong as the logistics, payments, and cloud vendors you never think about. CEVA's incident already swept up retailers like Bol and De Bijenkorf and gaming giant Valve, showing how one vendor breach cascades across unrelated industries.
Expect more "sorry, please reorder" emails before this one gets fully sorted out.