11 Million Impacted by Capcom Data Breach

Japanese gaming company Capcom has disclosed a data breach impacting 11 million email addresses and the personal information of a small number of individuals.

The incident, the gaming giant says, was discovered on October 19 and involved unauthorized access to CAPCOM ID, its shared service used for accessing online services and for playing online games.

During the intrusion, the hackers stole the email addresses of 11,774,247 people, along with account data such as creation date, last login date, number of logins, and the last login’s IP address.

For 43 of the affected customers, the hackers also compromised dates of birth, gender information, country/region details, and nicknames.

Additionally, Capcom determined that the attackers changed the CAPCOM ID account passwords for 196 of the affected users. The company says that no user passwords were compromised and that it has already reset the passwords for the affected accounts.

Capcom says it implemented incident response measures and all services using CAPCOM ID remain available.

“In addition, we have started to contact the target customers sequentially, and we have established a dedicated contact point for customers regarding this matter,” an automated translation of Capcom’s incident notice reads.

The gaming company says it has reported the data breach to the relevant authorities and continues to investigate it.

It also warns the affected users to be wary of unsolicited email messages impersonating the company or related entities and containing suspicious URLs or attachments.

“We take this matter seriously and will continue to conduct detailed surveys, take measures to prevent recurrence based on the causes identified this time, and work to further strengthen our information security system,” Capcom added.

This article was published by Security Week. Please check their website for the original content.