Capcom affected by data breach, over 11.7m Capcom ID accounts compromised
By Publisher verifies client details were accessed by an unauthorised external entity following inquiry
Image credit: Capcom
Capcom has experienced a data breach that impacted over 11.7 million Capcom ID accounts.
Capcom ID is utilized to oversee online functionalities, web services, and multiplayer across its catalog, including titles like Street Fighter 6, Monster Hunter, and Resident Evil.
The publisher established that on October 19, client details were accessed by an unauthorised external entity.
“Capcom has not verified any breach of Capcom ID account login passwords initially created by the customers themselves,” the publisher stated in an announcement issued yesterday.
“Nonetheless, Capcom has confirmed that passwords were altered without permission on 196 accounts. The credentials related to these accounts have already been reset, and the company persists in investigating the extent of any effects stemming from this occurrence.”
“Capcom has executed emergency response actions and has pinpointed and rectified the attack method involved in this event. Services employing Capcom ID, including games, remain operational. Moving forward, the company will commence reaching out to affected clients and has set up specialized customer-support channels for inquiries relevant to this issue.”
In a notice shared today (October 23), Capcom stated it had “confirmed that login passwords were altered without permission for 196 accounts due to this occurrence. During the ensuing inquiry, the company has assessed the extent of effects arising from the unauthorised alteration of passwords.”
The publisher determined that this external entity accessed the e-Capcom (online storefront operated by Capcom in Japan) account pages of 19 out of the 196 accounts whose passwords had been modified.
Affected particulars included: name, name in Japanese phonetic characters, phone number, postal code, address, gender, birthdate, transaction history, e-Capcom customer inquiry record, and saved address book details.
Credit card details were not compromised.
“The inquiry into the range of the impact from this event has been finalised. Capcom will nonetheless continue supervising Capcom ID and associated services. The Company regards this incident with the utmost seriousness and will consistently apply measures to avert recurrence while striving to further reinforce its information-security framework.”
Capcom was earlier hit by a ransomware assault in November 2020 that compromised the details of 16,415 individuals.
