Pokémon Center customers in the UK and Germany have been caught up in a data breach at CEVA Logistics, the same shipping partner whose hack recently affected Valve's Steam Machine and hardware customers. CEVA notified Pokémon Center that some customer data may have been exposed, and as a result Pokémon Center has cancelled the affected orders, unlike Valve, which did not cancel orders in its own breach notification.

The exposed information may include full names, mailing addresses, phone numbers, email addresses and order details, though payment and card information remains safe since it is not shared with CEVA. The breach is believed to have occurred between 29th July and 1st August, and Pokémon Center's UK site is now warning of shipping delays. The timing is particularly unfortunate, as some cancelled orders included sought-after Pokémon 30th anniversary merchandise, with no guarantee of restock if customers reorder.