Key information
Capcom recently disclosed a security incident involving unauthorized third-party access to its Capcom ID system. The breach, which occurred on 19 October, affected 11,774,247 accounts, compromising various user details.
The exposed data includes email addresses and system identifiers such as account creation dates, last login timestamps, total login counts, and IP addresses. For a smaller subset of 43 accounts, attackers also accessed dates of birth, gender, country or region, and nicknames.
While user-set passwords remained secure, Capcom confirmed that 196 accounts had their passwords changed without authorization. The company has since reset these passwords and reported the incident to the Osaka Prefectural Police and Japan's Personal Information Protection Commission. Capcom claims to have addressed the specific attack method used.
Capcom advised users to remain vigilant against potential fraudulent messages resulting from the leak. This event marks the second major security breach for the publisher in six years, following a 2020 ransomware attack. The company does not anticipate that its video games will be impacted by this latest security failure.
