Capcom discloses breach affecting 11. 7 million CAPCOM ID users, primarily exposing email addresses
A small number of accounts also lost personal details, and attackers reset passwords on 196 accounts
Company secured the platform, notified authorities, and warned users about phishing attempts
Japanese gaming behemoth Capcom just confirmed suffering a data breach that exposed sensitive information on more than 11. 7 million people. Almost all had their emails compromised, with a small subset also losing birthdays and locations, as well as passwords changed. Capcom is a super popular video game developer and publisher, behind mainstream names such as Resident Evil and Street Fighter . One of its services is called CAPCOM ID – it offers a free, unified account that lets users access various games and online services. Currently, CAPCOM ID has more than 10 million users and the company recently published a new security advisory on its Japanese site, saying the service was accessed by a third party, “resulting in the leakage of some customer information to external parties”.. Changing passwords
“We deeply apologize for the great inconvenience and concern caused to our customers and all stakeholders,” the machine-translated warning reads. Capcom said the breach triggered its security protocols, and that the CAPCOM ID service has been secured. It continues to be available for use, and there is no impact on gameplay in any of the games. However, the analysis of the breach determined that the threat actors obtained 11,774,247 user email addresses, as well as system-specific identification information: account creation date and time, last login date and time, number of login counts, and client IP at last login
For a handful of users – 43 of them – the threat actors also obtained dates of birth, gender information, nicknames, and data on their country and region. For 196 people, the attackers managed to change their passwords , in an attempt to lock legitimate users out of their accounts…