Capcom has officially confirmed a significant security incident that compromised the personal data of more than 11.7 million users associated with its online membership service. The video game publisher issued a statement warning customers to remain vigilant against phishing scams as the company investigates the scope of the unauthorized access.
Scope of the Capcom data breach
The incident, which the company described as unauthorized access by a third party, began on October 19 when Capcom detected suspicious activity on its Capcom ID platform. The company immediately blocked access to the affected systems and launched an internal investigation to determine the cause and extent of the breach. Capcom also reported the incident to local law enforcement and its external security advisory board.
According to the company’s disclosure, the leaked data includes millions of account email addresses. In a smaller subset of cases, the breach exposed more sensitive personal information. Specifically, the birth dates, genders, countries or regions, and nicknames of 43 accounts were accessed. Additionally, Capcom confirmed that passwords for 196 accounts were changed without authorization.
Despite the severity of the intrusion, Capcom emphasized that customer credit card information was not included in the compromised data. The company stated that it has identified and addressed the specific attack method used in the incident.
Impact on gaming services and user safety
Capcom assured users that the Capcom ID service remains operational. This includes access to online features in major titles such as Street Fighter 6, which rely on the membership platform for connectivity. However, the company warned that the exposure of email addresses and personal details could facilitate targeted phishing campaigns.
Users are advised to scrutinize any unsolicited emails claiming to be from Capcom. The leaked information could be used by malicious actors to craft convincing scam messages that impersonate the company. Capcom ID users should be particularly cautious of any requests for personal information or payment details.
This event adds to a recent trend of security issues within the gaming industry. Rockstar Games confirmed in April that it had suffered a third-party data breach, highlighting the ongoing challenges major publishers face in protecting user data. As Capcom continues its investigation, customers are encouraged to monitor their accounts for any unusual activity.
Source: Engadget
