11 Million Impacted by Capcom Data Breach
What happened
The incident, the gaming giant says, was discovered on October 19 and involved unauthorized access to CAPCOM ID, its shared service used for accessing online services and for playing online games. Capcom says it fully implemented incident response measures and all services using CAPCOM ID remain available.
It also warns the affected users to be wary of unsolicited email messages impersonating the company or related entities and containing suspicious URLs or attachments. Related: Hackers Steal 1.8 Million Records From Nikkei Related: 970,000 Medi-Cal Members Affected by Paradigm Healthcare Data Breach Related: PHP2Shell Exploitation Started Days Before Patches Related: Tech and Security Companies Respond to PHP2Shell Vulnerabilities Written By Ionut Arghire Ionut Arghire is an international correspondent for SecurityWeek.
The hackers stole 11 million email addresses from CAPCOM ID and changed the login passwords for 196 accounts.
Data Breaches 11 Million Impacted by Capcom Data Breach The hackers stole 11 million email addresses from CAPCOM ID and changed the login passwords for 196 accounts. During the intrusion, the hackers stole the email addresses of 11,774,247 people, along with account data such as creation date, last login date, number of logins, and the last login’s IP address.
For 43 of the affected customers, the hackers also compromised dates of birth, gender information, country/region details, and nicknames. Additionally, Capcom determined that the attackers changed the CAPCOM ID account passwords for 196 of the affected users.
The company says that no user passwords were compromised and that it has already reset the passwords for the affected accounts. The gaming company says it has reported the data breach (an incident in which data leaves an organisation without permission) to the relevant authorities and continues to investigate it.