Capcom data breach exposes 11.7 Million account records

More than 11.7 million records tied to Capcom’s online membership accounts were accessed by an unauthorised third party. Capcom confirmed the data breach in a statement, apologised for the trouble caused and said emergency response measures are already in place.

In total, 11,774,247 records had email addresses and system-specific identifier information accessed. A much smaller group of 43 accounts also had their date of birth, gender, country or region, and nickname accessed.

Another 196 accounts had their ID passwords changed without authorisation. Capcom says the passwords customers originally set were not accessed. They were altered by the intruder, and the company has since reset the passwords on all affected accounts. Credit card information was not compromised.

What is Capcom doing about this situation

The company noticed suspicious activity on October 19 and began blocking the third party’s access. By then, the unauthorised access had already taken place. The company activated its emergency response plan, set up an internal incident response headquarters and reported the incident to the Japanese authorities. It says it has identified and addressed the method used in the attack, and it is still monitoring the situation.

Affected customers will be notified directly. They are advising everyone to be careful with suspicious emails or messages, and not to open links or attachments from unknown senders.

The breach has not affected anyone’s ability to access or play games.