Capcom: 11,774,247 Capcom ID Accounts Viewed in Unauthorized Access

Capcom announced this week that it detected unauthorized access by a third party to details of Capcom ID accounts. The number of affected accounts is 11,774,247, and externally viewed system-specific identification information includes email addresses, account creation timestamps, last login timestamps, login counts, and the IP address used at the last login.

For a subset of accounts (43), date of birth, gender, country/region, and nickname were also accessed, the company reported. User-chosen passwords themselves were not directly viewed, but passwords on 196 accounts were changed without authorization; Capcom says it has already reset those passwords to prevent misuse.

Capcom stated that credit card information was not affected and that it will notify impacted users. Because email addresses were exposed, the company is urging users to be alert for phishing emails impersonating Capcom. Capcom is continuing a detailed investigation and says it will implement recurrence-prevention measures and strengthen its information security framework.

This is the second major breach disclosed by Capcom; the company previously reported a ransomware incident in November 2020 that led to personal information being leaked. The current announcement outlines the scope of impact and the company’s response to date, and Capcom says it will promptly update its official site if additional facts that require disclosure are discovered.