Capcom has confirmed a data breach affecting 11.7 million accounts tied to its CAPCOM ID service, used by players to access online gaming features. The company detected unauthorized access on October 19 and confirmed the intrusion the same day, though it did not disclose how the attackers gained entry.
The breach exposed email addresses and system data for all affected accounts, including creation dates, login timestamps, and the most recent IP addresses used. For 43 accounts, additional details, such as date of birth, gender, country, and nickname, were also compromised. The attackers altered passwords on 196 accounts, which Capcom has since reset, but the company states it found no evidence of stolen customer passwords.
Payment card information was not part of the exposed data, though email addresses remain valid and could be used for phishing attacks. Capcom advises users to avoid clicking links or opening attachments in suspicious messages claiming to be from the company.
The incident prompted Capcom to establish an internal response team on October 20 and report the breach to Japanese authorities, including the Osaka Prefectural Police and the Personal Information Protection Commission. The company claims to have contained the breach and says its services remain operational, though it continues investigating the attack method.
Read Also: 7 Growth Marketing Strategies for Startups That Can’t Afford to Waste Their Budget
Capcom will notify affected users and has set up regional support channels, including a toll-free line in Japan and online forms for other regions. It has also pledged to publish updates if further details emerge. No group has claimed responsibility for the attack, though this is Capcom’s second major breach in two years, following a 2020 ransomware attack that exposed data for up to 350,000 individuals.
While Capcom’s response appears swift, the scale of the breach shows persistent risks in gaming platforms. Players who use CAPCOM ID for multiplayer features or digital purchases may face heightened phishing risks, even if their core account details remain secure. The company’s history of breaches also raises questions about whether its security measures align with industry standards for handling sensitive user data.
Capcom has not specified whether the breach originated from internal vulnerabilities or external exploitation. The company’s ongoing investigation may reveal additional details, though it has not indicated a timeline for completion. Users with concerns can contact Capcom’s support channels directly.
Leave a Reply