Capcom data breach: over 11.7m Capcom ID accounts compromised
Publisher Capcom has confirmed a significant data breach affecting over 11.7 million Capcom ID accounts. The company discovered that an unauthorized third party accessed customer information on October 19.
The Capcom ID system is essential for managing online features, web services, and multiplayer functionality across the publisher's major titles, including Street Fighter 6, Monster Hunter, and Resident Evil. While Capcom stated that user-set login passwords were not broadly compromised, the breach did lead to the unauthorized password changes of 196 accounts. These specific passwords have since been reset.
The investigation revealed that for 19 of those 196 accounts, attackers gained access to pages within the e-Capcom online store. The compromised information includes:
- name and name in Japanese phonetic characters;
- telephone number and postal code;
- physical address;
- gender and date of birth;
- purchase history and customer inquiry history;
- saved address book information.
Crucially, credit card information was not affected. Capcom has already implemented emergency response measures to address the attack method used and confirmed that all services using Capcom ID remain operational. The company plans to contact affected customers directly through dedicated support channels.
This incident follows a previous ransomware attack in November 2020, which compromised the data of 16,415 individuals, with a potential impact reaching up to 390,000 people.
Флешка
