Capcom Data Breach Hit 11.7 Million Capcom ID Accounts; Card Details Not Affected
Capcom says an outsider accessed emails and login data for 11,774,247 Capcom ID accounts. Passwords and credit card details were not exposed, but phishing is a risk.
Capcom has disclosed a data breach that let someone outside the company see the details of more than 11 million Capcom ID accounts. Capcom ID is the free account needed for the online features of some Capcom games, including Street Fighter 6. The company says it detected the breach this week, according to Video Games Chronicle.
What was exposed
For all 11,774,247 affected accounts, the attacker gained access to the user's email address. They also saw system-specific identifier information. That covers the date and time the account was created, the date and time of the last login, the number of logins and the IP address used during the last login.
For 43 of those accounts, more was exposed: the date of birth, gender, country or region, and nickname.
Capcom says the attacker could not access any passwords set by users. Credit card information was not affected, the company says.
The 196 accounts with changed passwords
The attacker was able to change the passwords on 196 accounts without authorization. Capcom says it has already reset those passwords to stop the accounts being taken over.
Apart from those 196 users, Capcom's statement indicates everyone else should be able to keep using their Capcom ID as normal. Capcom says it will notify users whose accounts were accessed.
The phishing warning
Because email addresses were seen, Capcom warns that affected people may receive fraudulent emails pretending to be from the company. Its guidance is to be careful with any suspicious email or message. Capcom tells people not to open URLs in them or open attached files.
Capcom says it takes the matter "extremely seriously" and is continuing a detailed investigation. It plans to introduce measures to prevent a repeat and to strengthen its information security. If further facts need disclosing, it says it will post updates on its official website and other channels. The company also apologized to customers and other stakeholders.
Background
This is not the first major breach at the publisher. In November 2020, Capcom revealed it had suffered a ransomware attack. Hundreds of thousands of pieces of personal data were stolen from its servers, including names and addresses of customers and former employees.
What it means for you
If you have a Capcom ID, watch for a notification from Capcom saying whether your account was among those accessed. Treat any email that claims to come from Capcom with caution, especially one with links or attachments. The sources do not say Capcom has asked users to change their passwords, and they do not describe a way to check an account yourself. Capcom says it will post further information on its official website if more facts emerge.
Also read EA Shuts Down BioWare, Cancels Next Mass Effect and Cuts About 400 Jobs
Quick answers
Were credit card details stolen in the Capcom breach?
Capcom says no credit card information was affected. The exposed data was account-related, such as email addresses and login details.
Were Capcom ID passwords exposed?
Capcom says the attacker could not access passwords set by users. However, the attacker did change the passwords on 196 accounts, and Capcom has reset those.
Which games use Capcom ID?
Capcom ID is required for the online features of some Capcom games. Street Fighter 6 is the example given in the source.
Keep it in Saved stories on this device to read later.
