Capcom Data Breach Hits Over 11.7 Million Capcom ID Accounts
Capcom has confirmed a significant data breach affecting more than 11.7 million Capcom ID accounts, after an unauthorized third party accessed customer information on October 19. The Capcom ID platform underpins online features, web services, and multiplayer for major titles including Street Fighter 6, Monster Hunter, and Resident Evil.
What Happened and What Was Accessed
According to GamesIndustry.biz, Capcom identified the intrusion and moved quickly to contain it, completing emergency response measures and addressing the specific attack method used. Despite the scale of the breach, Capcom stated it has not confirmed that customer-set login passwords were compromised across the broader pool of affected accounts.
However, passwords were changed without authorization on 196 accounts. Those passwords have since been reset by Capcom. Of those 196 accounts, the company determined that the third party accessed the e-Capcom online store account pages of 19 of them, exposing a range of personal details.
Personal Data Exposed
For the 19 e-Capcom accounts accessed, the compromised information covered a considerable set of personal fields. Critically, GamesIndustry.biz reports that credit card information was not affected.
| Data Category | Affected |
|---|---|
| Name and phonetic characters | Yes |
| Telephone number | Yes |
| Postal code and address | Yes |
| Gender and date of birth | Yes |
| Purchase and inquiry history | Yes |
| Saved address book | Yes |
| Credit card information | No |
Capcom’s Response and History
Capcom stated in an update posted on October 23 that it has completed its investigation into the scope of the unauthorized password changes and will begin contacting affected customers directly. The company has also set up dedicated customer support channels for those with questions about the incident. Capcom added that it will continue monitoring Capcom ID and related services going forward and plans to strengthen its information security framework.
This is not the first time Capcom has dealt with a serious security incident. As GamesIndustry.biz notes, the company suffered a ransomware attack in November 2020 that compromised the data of 16,415 people, with the potential number of those affected reaching up to 390,000. The recurrence of a major security event will likely increase pressure on Capcom to invest more heavily in its defenses, particularly given the size of its player-facing ID platform.
Sources: GamesIndustry.biz
Editor at SaveGameVault. Passionate about gaming news and mods.
Discussion (0)