Capcom confirms breach affecting 11.7 million Capcom ID users
Capcom confirmed a breach of its Capcom ID service affecting more than 11.7 million users. Account emails and limited profile data were exposed, but credit card information was not; the company warned of phishing emails.
The company said the breach included emails associated with millions of accounts. It also included the birth date, gender, country or region and nickname of 43 accounts, along with unauthorized changes to 196 account passwords. Capcom said customer credit card information was not part of the breach.
Capcom said it detected suspicious activity on Oct. 19 indicating potential unauthorized access to Capcom ID. The company said it blocked access immediately and began investigating the cause and scope, and confirmed that unauthorized access had already occurred. It reported the incident to local police and its external advisory board for security oversight.
Capcom said it identified and addressed the attack method. Services that use Capcom ID remain available, including games such as Street Fighter 6 that require it for online play. The company warned users to be wary of suspicious emails because the leaked information could be used in scams that impersonate Capcom.
The breach is not the only recent security incident at a major game company. Rockstar Games confirmed in April that it had been hit by a third-party data breach, Engadget reported.