Capcom confirms data breach affecting 11.7 million accounts - BleepingComputer
Japanese gaming giant Capcom has confirmed a data breach exposing 11.7 million customer email addresses and associated information through its CAPCOM ID membership service.
The exposed data includes account creation dates, last login timestamps, number of logins, and IP addresses used at last login. For 43 accounts, additional information such as dates of birth, gender, nicknames, and countries were compromised. Another 196 accounts had their passwords changed by attackers, though Capcom has since reset them.
Security Response
Capcom detected suspicious activity and confirmed unauthorized access on October 19. The company immediately launched an investigation, reported the incident to police and Japan's Personal Information Protection Commission by October 21, and identified the intrusion method.
Capcom said its online services remain unaffected, but cautioned users to stay vigilant for unsolicited communications and emails requesting additional information, or messages containing URLs and attachments.
Previous Incident
This isn't Capcom's first security breach. In November 2020, the company suffered an attack by the Ragnar Locker ransomware gang, which claimed to have stolen 1 TB of data affecting up to 390,000 people. Capcom later disclosed that attackers gained access through an old VPN device in April 2021.
Related
