The Pokémon Company International, Inc.

The Pokémon Company International runs the global Pokémon brand outside Asia from its Bellevue, Washington headquarters - managing everything from the flagship video games and the Trading Card Game to the animated series, licensing deals, and the official website. Founded in 1996, it operates one of the most popular children's entertainment properties in the world, a franchise that has sustained market dominance for over two decades across merchandise, interactive experiences, and marketing channels. That surface area is the threat model. A cybersecurity operation here means defending a sprawling digital estate that touches millions of young users, handles e-commerce and account systems for the Trading Card Game and Pokémon video games, secures content distribution for a globally syndicated animated series, and protects high-value licensing and brand IP. The attack surface spans web applications, mobile ecosystems, partner integrations, and the kind of personally identifiable information associated with a children's audience that draws regulatory scrutiny under COPPA and international equivalents. Security teams in this environment work across application security, cloud infrastructure, identity and access management, and incident response - with the added complexity of securing collectible and digital goods economies where fraud, account takeover, and counterfeit operations are persistent adversaries. The work is less about perimeter defense and more about securing interconnected systems at franchise scale, where a single compromised credential or API can ripple across games, cards, and content platforms simultaneously.