Japanese video game company Capcom has disclosed a security breach involving its CAPCOM ID membership service that exposed data for over 11.7 million accounts. The compromised information includes email addresses, account creation dates, last login timestamps, login frequency, and IP addresses from users’ most recent logins. For a smaller group of 43 accounts, additional personal details such as birth dates, gender, nicknames, and countries were also exposed. Capcom confirmed that passwords and credit card information were not compromised in the incident.
The company detected suspicious activity on October 19 and confirmed the unauthorized access by the following day. Capcom reported the breach to Japanese police and the Personal Information Protection Commission on October 21. For 196 accounts, attackers attempted to change passwords to lock out account owners, but the company reset them. Capcom has identified the intrusion method and implemented security measures to prevent future incidents. The company plans to notify affected customers in stages through region-specific communication channels.
Source: Read the full story at BleepingComputer
This summary was written with AI assistance from the linked source.
Send this to yourself, or to someone who should see it
Enter your email and we will send you a link to this article.
