Pokémon Center data breach exposes customer info, cancels some orders
Teaser from the source
Pokémon Center is notifying customers in the United Kingdom and Germany that it suffered a third-party data breach after hackers stole customer personal and order information from third-party logistics provider CEVA Logistics. [...]
This is the RSS-feed teaser. Read the full article at the original source.
Read at BleepingComputerMore on customer
Other advisories
- Not ratedosv:CVE-2026-120205Thelia before 3.1.0 Stored XSS via Coupon Condition Customer Name
- Not ratedosv:CLEANSTART-2024-BK15179In the login screens (in agent and customer interface), Username and Password fields use autocomplete, which might be considered as security issue
- Not ratedosv:CVE-2026-62991Shopper: customer detail IDOR exposes administrator and staff records
- MediumCVE-2026-116854Aguila Technologies WP Customer Area: Cross-Site-Scripting (XSS)
- MediumCVE-2026-116854Aguila Technologies WP Customer Area: Cross-Site-Scripting (XSS)
- Not ratedosv:CVE-2026-61708SOCFortress CoPilot: Cross-Tenant Arbitrary Object-Store Write via the Data-Store Upload Endpoint (customer_user)
- HighCVE-2026-104368WebToffee Export and Import Users and Customers: unzureichende Kodierung von Ausgaben
- HighCVE-2026-104368WebToffee Export and Import Users and Customers: unzureichende Kodierung von Ausgaben
Other news entries
- Synology NAS Devices Targeted in Ransomware Attacks Exploiting Patched DSM FlawNewsThe Hacker News
- Your Mobile Carrier Stores Your Call Logs for YearsNewsBleepingComputer
- Revolve Data Breach Impacts at Least 200,000 PeopleNewsSecurityWeek
- A compromised DevOps laptop caused the $6.3B Binance breachNewsCSO Online
- FBI pins $6.3B Binance crypto heist on North Korean hackersNewsThe Register — Security
- Synology warns of C3RB3R ransomware attacks targeting NAS devicesNewsBleepingComputer
- When confusion reigns, trusted vendors must guide their SMB customersNewsESET WeLiveSecurity
- Polymarket Returns $3.9 Million to Traders as DebugBear Cites DNS HijackNewsSecurityWeek
ID