Pokémon 30th Anniversary Cards Cancelled After Data Breach
Pokémon cancels 30th anniversary card orders after cyber incident exposes customer details in Europe.
The update
The Pokémon Company has cancelled orders for its 30th Anniversary Celebration Cards following a cyber incident that potentially exposed customer data. The breach appears to be isolated to European customers who purchased through the Pokémon Center website, with orders handled by logistics firm CEVA. Affected customers received emails stating their personal information—including names, addresses, phone numbers, email addresses, and order details—may have been accessed by unauthorized parties. Notably, unlike Valve’s similar situation, Pokémon has cancelled the affected orders entirely.
Why it matters
This incident compounds ongoing challenges in the Pokémon card market, which has already faced scarcity issues and anti-scalping measures. The data breach puts affected customers at risk for phishing scams while simultaneously preventing them from receiving merchandise they had pre-ordered. The breach also highlights how supply chain vulnerabilities can impact multiple major companies, as CEVA Logistics was previously compromised in an attack affecting Valve’s European operations.
What to watch
Will The Pokémon Company offer alternative fulfillment for affected customers? How extensive is the data breach beyond what’s been confirmed? What measures will be implemented to prevent similar incidents? Will this lead to increased security protocols for merchandise distribution across the gaming industry?
Sources
- ign.com — Details on the cancellation and data exposure
- kotaku.com — Comparison with Valve's similar situation
- eurogamer.net — Information about CEVA Logistics' role
