Image credit: Pokemon

It appears the consequences of the recent CEVA Logistics data breach are wider than initially anticipated. Days after the company alerted Valve of the hack that affected Steam hardware customers in Europe, the shipping company has notified Pokémon Center that some of its customers are also affected. Pokémon Center is Pokemon's official merchandise and collectibles store.

In this case, people who placed orders with Pokémon Center in the UK and Germany are being told that some of their personal information may have been breached, alongside some order information (via BleepingComputer).

As in Valve's case, CEVA Logistics is a shipping partner to Pokémon Center in Europe. Because of that, certain pertinent information is shared with the company in order for it to be able to deliver the goods.

The email notification sent to customers is similar to the one Steam hardware customers received, with one notable exception: Pokémon Center has cancelled the orders of the affected customers.

Image credit: Pokemon

Similar to Valve's message, Pokémon Center says some of the leaked information could include full names, mailing addresses, phone numbers, email addresses, and details about the orders themselves, including their contents. The good news is that customer payment and card details are safe, since Pokémon Center does not share those with CEVA.

Beyond the compromised information, the breach is also causing delays in shipping across the Pokémon Center UK website.

"We are currently experiencing delays in processing and shipping orders. Some orders may take longer than usual to be dispatched and delivered. We apologise for the inconvenience and appreciate your patience," a message on Pokémon Center's UK site reads.

The cyberattack is believed to have taken place between 29th July and 1st August. Pokémon said it's "in conversation" with CEVA to receive updates about the full scope of the incident, and to ensure that "measures are put in place" to prevent repeats. It's also monitoring its own systems "to ensure they're unaffected", stressing that the website has not been impacted by the attack.

The email notification added that customers' credit cards were not charged for the order, only a payment authorisation was placed, which should drop off in seven days at most. As a gesture of goodwill, the email also included a 20 percent off coupon, valid on one order and usable until 30th November.

The timing of the breach couldn't be worse, as some of the cancelled orders include highly anticipated Pokémon 30th anniversary products. Though you can place a new order if your existing one got cancelled, there is no guarantee the item you want will still be in stock.

Mentioned in this article