Capcom has confirmed a data breach affecting 11,774,247 Capcom ID accounts after an unauthorized third party gained access to user information. The incident was detected this week, according to the company, which operates Capcom ID as a free account service required to access online features in several of its games, including Street Fighter 6.
The compromised information includes email addresses, certain account identifiers, account creation dates and times, the most recent login time, total login counts, and IP addresses used during the latest login. Although payment information was not affected, the incident exposed a substantial amount of account-related data.
What Information Was Exposed?
Capcom also reported that additional personal information was accessed in 43 accounts. The affected data included dates of birth, gender, country or region, and account nicknames.
The company stated that passwords created directly by users were not accessed during the incident. However, the attacker managed to change the passwords of 196 accounts without authorization.
Capcom has since reset the passwords for those 196 accounts to prevent them from being used to take over the affected profiles. According to the company, other users should still be able to access and use their Capcom IDs normally.
Capcom also confirmed that credit card information was not involved in the breach.
Capcom Warns Users About Phishing Emails
Because email addresses were among the exposed information, Capcom is urging users to remain vigilant against phishing attempts. Attackers could potentially use the leaked addresses to send fraudulent messages impersonating the company.
Players should be particularly cautious of emails requesting that they click unfamiliar links, download files, or open suspicious attachments. Users should verify the authenticity of messages claiming to come from Capcom before taking any action.
The company also stated that it would directly contact users whose accounts were identified as having been accessed during the incident.
Investigation Remains Ongoing
Capcom has described the incident as a serious matter and confirmed that its investigation is continuing. The findings will be used to strengthen its security systems and help prevent similar incidents in the future.
The company has pledged to publish further updates through its official website and other communication channels if additional information becomes available. Capcom also apologized to affected users and other parties for the incident.
While the company has confirmed that payment information and user-created passwords were not compromised, the exposure of email addresses, IP addresses, and other account details means users should remain alert to suspicious communications and unexpected account activity.
Leave a Reply