Abstract:
Capcom confirmed that a major security breach occurred in its Capcom ID service, resulting in the leakage of information related to more than 11.7 million accounts worldwide. The company said it had taken emergency steps to prevent unauthorized access and was still investigating the full impact of the incident.
External parties accessed information on 11,774,247 Capcom ID accounts. This information includes the date the account was created, the date of the last login, the number of logins, and the IP address used for the most recent login. Additional information was leaked for 43 accounts, including date of birth, gender, country and nickname.
Although the attacker did not obtain the user's original password, he changed the passwords of 196 accounts without authorization. Capcom has reset these passwords to prevent account takeover; except for users whose passwords have been changed, other users should be able to use Capcom IDs normally.
According to Capcom, the company first discovered signs of unauthorized access on October 19 and began blocking related activity while investigating the cause of the incident. The next day, the company established an internal investigation team and reported the matter to the police and the Japan Personal Information Protection Commission on October 21.
Capcom ID is a free account required for some games to use online functions. "Street Fighter 6" is one of the works that uses this account. Given that a large number of email addresses have been exposed, Capcom reminds users to be wary of fraudulent emails impersonating the company and not to open suspicious links or attachments.
Capcom will notify the user whose information was accessed and will continue to investigate the incident and develop measures to prevent a similar situation from happening again. If other facts that need to be disclosed are discovered, the company will update the information through its official website and other channels.
Comments