Capcom has officially confirmed that a data breach hit its Capcom ID online membership service, exposing the account records of 11,777,247 people worldwide. The company says a third party gained unauthorized access to the service, and the fallout is worse than the first reports suggested.
The biggest exposure is email addresses and system-specific identifier data, like login and account-creation timestamps, for nearly 11.8 million users. Beyond that, Capcom found 196 accounts where passwords were changed without authorization, and 43 instances of unauthorized access to personal records including date of birth, gender, country, and nickname. The company says passwords originally set by customers were not confirmed as compromised, and the affected passwords have already been reset. No credit card information was affected.
Capcom ID Artwork (Credits: Capcom)
How the Capcom ID data breach unfolded
Capcom first detected suspicious activity on Monday, October 19, and moved fast: it blocked access and started investigating the same day, then set up an internal incident response headquarters on Tuesday. The company confirmed the scope of what was exposed and reported it to its external Information Technology Security Oversight Committee. On Wednesday, it reported the breach to the Osaka Prefectural Police and Japan’s Personal Information Protection Commission. The investigation is still ongoing.
The company says it has set up dedicated customer-support channels for the breach and plans to notify affected customers. It also pledged to roll out prevention measures and strengthen its information security framework so this does not happen again.
What Capcom ID users should do now
Capcom ID is the account service behind franchises like Street Fighter, Resident Evil, Monster Hunter, Ace Attorney, and Mega Man, so the blast radius here is enormous. If you have an account, reset your password, turn on two-factor authentication if available, and watch your inbox for phishing attempts that play on the breach news. Capcom has already issued a phishing warning tied to this incident.
Also Read: Capcom Issues Phishing Warning After Data Breach Exposes 11.7 Million Customer Accounts | Zach Cregger’s Resident Evil Movie Passes $360M Worldwide, Outpacing Alien: Romulus
Source: Anime News Network — read the full story there.
