Capcom Says Data Breach Exposed 11.8 Million Email Addresses
Summary
Capcom disclosed unauthorized access to CAPCOM ID that exposed 11,774,247 email addresses and account data. Personal details of 43 customers were also compromised; the company says services remain available and affected passwords were reset.
Key points
- Capcom says it discovered unauthorized access to CAPCOM ID on October 19.
- The attackers stole 11,774,247 email addresses and account data, including creation dates, login activity and last-login IP addresses.
- For 43 customers, exposed information also included birth dates, gender, country or region, and nicknames.
- Capcom says attackers changed account passwords for 196 users; it says user passwords were not compromised and those accounts' passwords have been reset.
- CAPCOM ID services remain available, and Capcom says it has contacted affected customers, notified relevant authorities and continues investigating.
- Capcom warned affected users to watch for impersonation emails with suspicious links or attachments.
Article Details
- Victim Organization
- Capcom
- Incident Type
- Unauthorized access to CAPCOM ID accounts and theft of personal and account data
- Data Types Exposed
- Email addresses
- Account creation dates
- Last login dates
- Number of logins
- Last login IP addresses
- Dates of birth
- Gender information
- Country/region details
- Nicknames
- Affected Records
- 11,774,247 email addresses were stolen. For 43 affected customers, additional personal information was compromised.
- Operational Impact
- Capcom said services using CAPCOM ID remained available. It reset passwords for 196 affected accounts after attackers changed them.
- Claim Status
- confirmed