Capcom discloses breach affecting 11.7 million email records
The game developer says the October 19 breach exposed Capcom ID account details and warns users to avoid links and attachments in suspicious messages.
Loading… Բեռնվում է…
The game developer says the October 19 breach exposed Capcom ID account details and warns users to avoid links and attachments in suspicious messages.
Video game developer Capcom says a third party accessed customer information in its Capcom ID online membership service on October 19, affecting 11.7 million email-address records worldwide, IGN reported on October 22. In an October 23 statement, Capcom said its investigation had also found that 19 accounts had store pages accessed, exposing personal and shopping information.
Capcom ID manages online features, web services and multiplayer gaming across the company’s games.
Capcom said the unauthorized third party accessed account pages at e-Capcom, its online store in Japan, for 19 of the 196 accounts whose passwords had been changed without authorization. This store-page exposure concerned that subset, not all 11.7 million email-address records affected by the wider breach.
The exposed store information included names, names in Japanese phonetic characters, telephone numbers, postal codes, addresses, gender and dates of birth, according to Capcom. Purchase histories, customer inquiry histories and saved address-book information were also affected. Capcom said credit-card information was not affected.
| Number affected | Information or account changes |
|---|---|
| 11.7 million email-address records worldwide | Email addresses; account-creation and last-login dates and times; login counts; and the client IP address used at last login—the internet address used for that connection. |
| 43 of the affected records | Additional information: dates of birth, gender, country or region, and nicknames. |
| 196 accounts | Unauthorized changes to Capcom ID login passwords. |
Capcom said it had already reset the passwords of the 196 accounts. The company said it had not confirmed any compromise of login passwords originally set by customers themselves.
Capcom said customers could continue using the email addresses registered with Capcom ID. It warned that the exposed information could be misused to send fraudulent emails and advised customers not to follow links or open attachments in suspicious emails or messages.
The company said it had completed emergency response measures and had identified and addressed the attack method. Services using Capcom ID, including games, remain available, it said.
In its October 23 statement, Capcom said its investigation into the scope of the incident’s impact was complete. The company said it would take measures to prevent another incident, strengthen information security and continue monitoring Capcom ID and related services.
The W27 keeps the Galaxy Z Fold 8 Ultra’s core hardware, with dark-red or dark-blue finishes, golden accents and 16GB of working memory in both storage versions.
2 min
The satellite operator expects access to more than twice OneWeb’s current bandwidth in return for spending in 2027–2034, with initial IRIS² services expected from 2030.
3 min
The black, gold and green edition follows September’s sold-out preorders. Nintendo’s replenished launch-day stock also quickly sold out.
1 min