Capcom confirmed that hackers gained unauthorized access to CAPCOM ID, its online membership service. According to reports, the incident exposed information linked to 11,774,247 accounts worldwide.
The Japanese game publisher detected suspicious activity on October 19 and immediately blocked access. It formed an internal response team two days later and publicly disclosed the breach on October 22.
What Hackers Accessed
Capcom said the intruder accessed email addresses and system-specific identifiers for all 11.77 million affected records. This included the account creation date, the last login time, the total number of logins and the IP address used during the most recent login.
Capcom also identified 196 accounts where passwords had been changed without authorization. It reset the passwords for those accounts and said it has not confirmed any leak of user-set passwords. The company further explained that credit-card information was not affected. CAPCOM ID services remain available, and users can continue accessing and playing its games.
The company apologized to customers and said it would strengthen its information security framework after identifying the cause of the breach. Its investigation into the full scope of the unauthorized access is ongoing.
What Users Should Do?
Users should change their CAPCOM ID passwords and avoid reusing passwords across services. Customers should also treat unsolicited Capcom-related emails with caution. Exposed email addresses and login metadata can help criminals craft convincing phishing messages. Looking ahead, Capcom advised users to remain alert to fraudulent communications.
The breach is another reminder that even large game publishers remain attractive targets for cybercriminals. Capcom now faces the task of restoring user confidence while completing its investigation and hardening its systems.
Also Read: What AI-Powered Cybersecurity Services May Do for Businesses