2026 Pokémon Center — CEVA Logistics UK/Germany shipping breach; names/addresses/order contents; some orders cancelled

Company-confirmed third-party breach — August 17, 2026. BleepingComputer published Pokémon Center customer emails to United Kingdom and Germany shoppers: CEVA Logistics, used to ship PokemonCenter.com orders in those countries, reported a cyberattack commencing 30 July 2026 (inside the July 29–August 1 CEVA European warehouse window already described by Valve). Unauthorised parties may have obtained full names, mailing addresses, phones, emails, and order-content details. Pokémon Center says other customer/order information was not impacted and CEVA does not hold payment cards. Some recent orders were cancelled (“unforeseen fulfilment issue”); the UK site also warned of delays. Community reports included 30th-anniversary collection cancellations and other merch (e.g. Ghost Chateau Cyndaquil keyring). BleepingComputer had no reply on why cancellations were required versus delays. Same CEVA wave as Valve/Steam hardware, Bol, Ajax, ING NL, Ace & Tate. recordsAffected 0 pending an attested census.