Capcom Says Breach Exposed 11.7 Million CAPCOM ID Records
Summary
Capcom disclosed unauthorized access affecting more than 11.7 million CAPCOM ID records, including email addresses, activity details and IP addresses. It reset passwords on 196 accounts and is investigating; phishing is a concern.
Key points
- Capcom says unauthorized access affected more than 11.7 million CAPCOM ID records worldwide; the figure counts records and may not represent individual users.
- Exposed information included email addresses, account activity details and IP addresses; a smaller number of records also contained dates of birth.
- Capcom says credit card information was not affected and has not confirmed that customers’ original passwords were compromised.
- Passwords on 196 accounts were changed without authorization, and Capcom has reset them. The company is investigating whether other unauthorized activity occurred on those accounts.
- Capcom discovered the incident on October 19 and says it addressed the attack method. Games and services remain available, and affected customers are to be notified.
- The exposed details could enable more convincing phishing. Capcom advises users to check accounts, enable two-factor authentication and avoid links or attachments in suspicious messages.
Article Details
- Victim Organization
- Capcom
- Victim Domain
- capcom.com
- Incident Type
- Unauthorized access to Capcom's online membership service and exposure of CAPCOM ID records
- Data Types Exposed
- Email addresses
- Account activity details
- IP addresses
- Dates of birth in a smaller number of records
- Affected Records
- More than 11.7 million records; this figure may not represent individual users. Passwords on 196 accounts were changed without authorization.
- Operational Impact
- Capcom says it addressed the attack method. Games and services remain available. Capcom is investigating the unauthorized password changes and whether other unauthorized activity occurred on the 196 accounts.
- Claim Status
- confirmed