Capcom reports breach affecting more than 11.7 million users
The company said account email addresses were exposed, while 196 accounts had passwords changed without authorization. Credit card information was not involved.
Capcom said a breach of its Capcom ID membership service affected more than 11.7 million users, exposing email addresses and some additional account details. The video game company warned that the exposed information could enable fraudulent emails posing as messages from Capcom.
Beyond the millions of email addresses involved, Capcom said the incident exposed birth dates, genders, countries or regions, and nicknames associated with 43 accounts. Passwords for 196 accounts were changed without authorization. The company said customer credit card information was not among the data affected.
Capcom said it detected suspicious activity on October 19 and immediately blocked access while investigating the incident's cause and scope. Its investigation confirmed that an outside party had already gained unauthorized access. The company subsequently notified local police and its external advisory board responsible for security oversight.
The company said it had determined how the attack was carried out and addressed that method. Services using Capcom ID remain available, including Street Fighter 6, which requires the membership service for online play.
