Capcom has announced a major security breach affecting its Capcom ID service, which exposed information from over 11.7 million accounts worldwide. The company says it has taken emergency steps to stop the unauthorized access and is still investigating the full impact.
The Japanese gaming company says that 11,774,247 email addresses were leaked, along with account details like creation dates, last login dates, number of logins, and the IP address from the most recent login. For 43 accounts, the breach exposed additional information, including birth dates, gender, country or region, and nicknames.
The breach led to unauthorized password changes on 196 accounts. Capcom has reset the passwords for these accounts and says there is no evidence that customers’ original passwords were leaked. Credit card information was not part of the compromised data.
Capcom says it first noticed signs of unauthorized access on October 19 and started blocking the activity while looking into the issue. The next day, the company set up an internal task force, and by October 21, it had reported the incident to the police and Japan’s Personal Information Protection Commission.
The company is reaching out to affected customers and has warned users to watch out for suspicious emails. Because so many email addresses were exposed, attackers might use the leaked information for phishing attempts that look like they come from Capcom or related companies.