News

Capcom Confirms Data Breach of Over 11 Million User Accounts

CAPCOM revealed on Thursday that there was a data breach of its online membership account service CAPCOM ID. The company stated that a third party had unauthorized access to the service, which affected the email address records and system-specific identifier information (such as date/time of logins and account creation) for 11,777,247 people worldwide. Moreover, there were unauthorized changes to passwords for 196 accounts and 43 instances of unauthorized access to personal records such as date of birth, gender, country, and nickname. CAPCOM has not confirmed any compromise for passwords originally set by customers, and affected passwords have already been reset. The company added that no credit card information was affected.

CAPCOM plans to notify affected customers going forward. It has already established dedicated customer-support channels related to the breach.

CAPCOM had first detected suspicious activity on Monday and immediately began blocking access and investigating the incident. The company confirmed the unauthorized access that same day and implemented emergency measures. The next day, CAPCOM established an internal incident response headquarters to gather information, and it confirmed what information was affected and reported it to its external Information Technology Security Oversight Committee. Finally, on Wednesday, CAPCOM reported the breach to the Osaka Prefectural Police and Japan's Personal Information Protection Commission. The company continues to investigate the incident.

In the future, CAPCOM aims to implement prevention measures and strengthen its information security framework.

CAPCOM is known for its franchises such as Street Fighter, Resident Evil, Monster Hunter, Ace Attorney, and Mega Man, among others.

Source: Capcom via Hachima Kikо̄