Capcom says 11.7 million CAPCOM ID records were exposed
Original title: Resident Evil maker Capcom warns of phishing after 11.7 million records exposed
Emails, activity data and IP addresses leaked; passwords on 196 accounts were changed and then reset.
Capcom disclosed unauthorized access to its CAPCOM ID membership service, affecting more than 11.7 million records worldwide. Exposed data includes email addresses, account activity and IP addresses, with dates of birth on a smaller set. Credit cards were not affected. Capcom found the incident on October 19, says it addressed the attack method, reset 196 changed passwords, and plans to notify customers while investigating further.
Unconfirmed: Capcom has not confirmed that customer-chosen passwords were stolen, and it is still investigating the 196 unauthorized password changes.
- Capcom discovered the incident on October 19.
- Credit card information was not affected.
- Someone changed passwords on 196 accounts; Capcom reset them.
- CAPCOM ID can link to PlayStation, Xbox, Steam, Epic and Nintendo.
- The 11.7 million figure counts records, not necessarily unique users.
Impact: Emails, activity details, IPs and some birth dates exposed
| Product | Affected |
|---|---|
| CAPCOM ID | — |
- 1.Enable CAPCOM ID two-factor authentication with an authenticator app.
- 2.Check the account at cid.capcom.com directly; do not use links in unexpected messages.
- 3.Review linked platform accounts, especially after an unexpected password-change notice.
From the original article
2 min read at malwarebytes.com
Exposed email addresses could put CAPCOM ID users at risk of phishing. Passwords were also changed without permission on 196 accounts.
By @MetallicaMVP · malwarebytes.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.