Capcom hit by data breach, compromising over 11.7 million Capcom ID accounts
Recently, Capcom disclosed a security breach impacting over 11.7 million users with Capcom ID accounts. This system is integral to accessing online services and playing multiplayer modes in several of its popular games including Street Fighter 6, Monster Hunter, and Resident Evil.
The company identified the breach on October 19, which involved unauthorized access to consumer information. According to a statement published by Capcom, no customer-set login passwords for Capcom ID accounts have been verified as compromised. However, it was discovered that passwords were unlawfully altered on 196 accounts. Following this discovery, these passwords have been reset while Capcom continues to review the full impact of the breach.
Capcom has dealt with this situation by deploying emergency measures and has also addressed how the breach occurred. All services related to Capcom ID, including game access, remain operational. The company will reach out to customers affected and has established dedicated support channels for further inquiries on this issue.
An update provided on October 23 confirmed the unauthorized password changes on 196 accounts. During ongoing investigations, the company learned that an unauthorized party accessed the e-Capcom store account pages of 19 accounts among those affected. Data accessed includes names, phonetic names in Japanese, contact details, postal information, gender, birth dates, purchase logs, inquiry histories, and address book entries. Importantly, no credit card data was compromised.
While the investigation has concluded, monitoring of Capcom ID and associated services will continue. The incident is taken very seriously by Capcom, which is implementing preventative measures and enhancing their security frameworks to avoid future issues.
This latest breach comes after a ransomware attack in November 2020, which impacted the personal data of 16,415 people. The possible upper limit of affected individuals from the current incident is estimated at 390,000.