Thông tin chính
Capcom has officially confirmed that an unauthorized third party gained access to customer data linked to the CAPCOM ID system. This security incident impacted 11,774,247 records globally, which included email addresses, account creation dates, login counts, and recent IP addresses.
The breach involved additional personal details for a smaller subset of 43 users, including nicknames, gender, and dates of birth. Furthermore, attackers modified passwords for 196 accounts, which the company has since reset, and accessed e-Capcom store pages for 19 Japanese customers, exposing names, phone numbers, and purchase histories.
Capcom stated that credit card information remained secure and there was no evidence that customer-set passwords were compromised. While the company identified and addressed the specific entry method used by the intruders, they have not publicly disclosed the technical details of the exploit.
The company reported the suspicious activity to the Osaka Prefectural Police and Japan's Personal Information Protection Commission on October 21. Although CAPCOM ID services remain operational, users are advised to be cautious of potential phishing attempts following the event.
