Capcom Confirms Data Breach Affecting Over 11.7 Million CAPCOM ID Accounts
Capcom has confirmed a major data breach affecting CAPCOM ID, the unified account service players use to access online features across many of the publisher’s games. In an official notice published on October 22, the company revealed that email addresses and related account information tied to more than 11.7 million accounts were accessed without authorization by a third party.
What Information Was Exposed
According to Capcom, the breach affected 11,774,247 records worldwide, each containing an email address along with system specific identifiers such as the account’s creation date, the date and time of its last login, the number of logins, and the IP address used during that last login. A much smaller group, just 43 accounts, also had more sensitive details exposed, including date of birth, gender, country or region, and the account’s nickname.
Capcom also confirmed that login passwords were changed without authorization on 196 accounts. All affected passwords have already been reset, and the company says it is continuing to investigate the scope of the impact. Credit card information was not included among the affected data.
“No leaks of passwords set by the customers themselves have been confirmed.”
Capcom, official statement
Monster Hunter Wilds is one of several current Capcom titles tied to CAPCOM ID accounts.
Capcom’s Timeline and Response
Capcom says it first detected suspicious activity on October 19 and immediately began blocking access while investigating the cause. On October 20, the company established an internal incident response headquarters and reported the matter to its external Information Technology Security Oversight Committee. The following day, October 21, Capcom reported the breach to the Osaka Prefectural Police and to Japan’s Personal Information Protection Commission.
The company says it has since completed emergency response measures and identified the method used in the attack. Services that rely on CAPCOM ID, including online features in Capcom’s games, remain available, and the incident has not affected players’ ability to access or play any titles.
What CAPCOM ID Users Should Do Now
Capcom plans to directly contact every customer confirmed to be affected and has opened dedicated support channels for the incident, including a toll free line in Japan and inquiry forms for North, Central and South America as well as Europe, the Middle East and Africa. The company warns that the leaked information could be used to send phishing emails impersonating Capcom or related parties, and it is urging anyone who receives a suspicious message to avoid clicking any links or opening attachments.
CAPCOM ID links progression and rewards across games like Monster Hunter Wilds.
Why This Matters
CAPCOM ID links progression, rewards and online features across much of Capcom’s current lineup, from Monster Hunter Wilds to Street Fighter 6 and Resident Evil, which is part of why a breach of this scale is significant even though no financial data or self chosen passwords appear to have been compromised. Capcom says it will share further updates through its official channels as the investigation continues.
Keep the adventure going! Check out more Gaming News on Gamersuniverse.
Picture Source: Capcom
