Japanese gaming developer Capcom has confirmed a security breach involving its CAPCOM ID membership service, which resulted in the exposure of personal data for more than 11 million users, according to coverage from Bleeping Computer.
The unauthorized access compromised email addresses, account creation dates, login timestamps, and IP addresses. While the majority of accounts were limited to these data points, a small subset of 43 users had additional information exposed, including dates of birth, gender, nicknames, and countries. Furthermore, attackers attempted to lock 196 accounts by modifying passwords, though the company intervened to reset them.
Capcom stated that credit card information and the passwords of the remaining members were not compromised. The company detected the suspicious activity on October 19 and notified law enforcement and the Personal Information Protection Commission by October 21. Although online services remain operational, the firm has implemented new security measures to prevent future intrusions.
This incident follows a significant 2020 ransomware attack that targeted the company via an outdated virtual private network device. Capcom is currently notifying affected users in stages and has established dedicated support channels to address concerns regarding the breach.
Source: Bleeping Computer
