Capcom has disclosed a data breach that affected over 11.7 million Capcom ID accounts. In case you didn’t know, that ID is used to manage online features, web services and multiplayer across the publisher’s portfolio, including Street Fighter 6, Monster Hunter and Resident Evil.
Capcom Data Breach Timeline and Affected Accounts
Capcom determined that an unauthorised third party accessed customer information on October 19th. In a statement posted on October 22nd, the publisher said it had not confirmed any compromise of login passwords originally set by customers. It did confirm that passwords were changed without authorisation on 196 accounts, and those passwords have since been reset.
In an update on October 23rd, the gaming giant said the investigation into the scope of impact had been completed. The publisher added that it will continue monitoring Capcom ID and related services.
Information Accessed in the Capcom ID Incident
The third party accessed the e-Capcom account pages of 19 of the 196 accounts. This service is the online store operated by the company in Japan. The affected information included name, name in Japanese phonetic characters, telephone number, postal code, address, gender, date of birth, purchase history, customer inquiry history and saved address book information. Credit card information was not affected.
The Japanese gaming giant was previously hit by a ransomware attack in November 2020 that compromised the data of 16,415 people. The publisher said the maximum number of people potentially affected by that incident could be 390,000.
The company said it has completed emergency response measures and has identified and addressed the attack method. The publisher stated that it will implement measures to prevent recurrence and further strengthen its information-security framework. Services that use Capcom ID, including games, remain available. They will begin contacting affected customers and has established dedicated customer-support channels for inquiries.
Pokdepinion: That’s a big number of accounts, so changing your password is probably worth the few minutes. Even if you think there’s no way your account is compromised, change it anyway.
