Capcom breach exposes 11.7 million CAPCOM ID records
Original title: Capcom data breach exposes 11.7 million account records
Stolen data is mostly emails and login metadata; Capcom found no customer passwords taken and reset 196 accounts.
Capcom says a third party gained unauthorized access to customer information linked to CAPCOM ID after suspicious activity detected and confirmed on October 19. Attackers obtained 11,774,247 records worldwide with email addresses and account system data, including creation time, last login, login count and the latest sign-in IP. Forty-three records also included date of birth, gender, country or region and nickname. Capcom says customer-set passwords and payment cards were not found compromised, services remain available, and no group has claimed responsibility.
Unconfirmed: The attack method is undescribed, no group has claimed responsibility, and the investigation is ongoing.
- Attackers changed passwords on 196 accounts; Capcom has reset them.
- Capcom reported the incident to Osaka police and Japan’s privacy commission on October 21.
- The company says it identified and addressed the attack method but did not describe it.
- A November 2020 ransomware attack previously affected up to 350,000 people.
Impact: Emails and account metadata for 11.7 million CAPCOM ID users
- 1.Do not open URLs or attachments in suspicious Capcom messages.
- 2.Use Capcom’s regional support channels if you are affected.
From the original article
2 min read at helpnetsecurity.com
Players who signed up for Capcom’s online account service may want to look twice at emails that seem to come from the company. The company has disclosed that a third party gained unauthorized access to customer information linked to CAPCOM ID, the account people use to sign in to the company’s web services and to play some of its games online.
By Sinisa Markovic · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.