Capcom breach exposes email addresses of 11.8 million users
Capcom found unauthorized access to CAPCOM ID that exposed the email addresses of 11,774,247 users. Attackers accessed additional personal data for 43 users and changed 196 passwords.
Capcom has disclosed a data breach involving 11,774,247 CAPCOM ID users. The attackers accessed email addresses and account data, including account creation dates, last login dates, login counts and IP addresses from the most recent logins.
The Japanese gaming company discovered the unauthorized access on October 19. CAPCOM ID is a shared account service for accessing Capcom’s online services and playing its games.
For 43 users, the attackers obtained dates of birth, gender information, country or region details and nicknames. Capcom also found that passwords for 196 accounts had been changed.
User passwords were not compromised, according to Capcom. The company reset the passwords for the 196 affected accounts and put incident-response measures in place. Services that use CAPCOM ID remained available.
Capcom has begun contacting affected customers and established a dedicated support channel for questions about the breach. The company reported the incident to relevant authorities and continues to investigate.
The company urged users to be cautious of emails that impersonate Capcom or related organizations. The messages may include suspicious links or attachments intended to obtain additional information.
“We take this matter seriously and will continue to conduct detailed surveys, take measures to prevent recurrence based on the causes identified this time, and work to further strengthen our information security system,” Capcom said in an incident notice.
Articles by this author
