A recent cyber incident impacting **CEVA Logistics**, a major third-party logistics provider, has led to a data breach affecting customers of **Pokémon Center** in the United Kingdom and Germany. The attack, which occurred between July 29 and August 1, 2026, compromised **CEVA**'s systems, exposing sensitive customer data shared for order fulfillment. **CEVA Logistics**, a subsidiary of the **CMA CGM Group**, is a global logistics giant, operating 1,000 warehouses and handling millions of shipments annually. This incident is not isolated, as **CEVA** has also confirmed that **Valve**, the company behind **Steam**, was similarly affected, with **Steam** hardware customers in Europe having their personal and order details stolen. ## Customer Data Compromised and Orders Canceled **Pokémon Center** has confirmed that unauthorized parties may have accessed customers' full names, mailing addresses, phone numbers, email addresses, and details regarding their **PokemonCenter.com** orders. Importantly, **CEVA** does not have access to payment card details, and this information was not compromised. In notification emails to affected customers, **Pokémon Center** expressed regret, stating that some recent orders have been canceled due to "unforeseen fulfillment issues" directly related to the **CEVA** cyberattack. While **Pokémon Center**'s UK website currently displays a notice about potential shipping delays, customers have also reported outright order cancellations for various merchandise, including highly anticipated 30th-anniversary collection products and other items like the Ghost Chateau Cyndaquil keyring.  The reason for the cancellations, rather than just delays, remains unclear. **Pokémon Center** has not yet provided further details regarding the scope of the cancellations or the specific impact on its fulfillment operations. Ghost Protocol has reached out to **Pokémon Center** for additional comments but has not yet received a response.