卡普空报告大规模数据泄露影响约1177万卡普空 ID 账户 无信用卡信息泄露

Capcom announced on October 22 that its online membership service CAPCOM ID (used for online titles like Street Fighter 6 and other services) was subject to unauthorized access by a third party. The company apologized for the incident and outlined known details about the data breach.

As of October 22, the email address records of 11,774,247 accounts worldwide have been affected, alongside information such as the date and time of account creation, date and time of last login, number of logins, and client IP address used during the user’s last login.

There were 43 instances of users’ date of birth, gender, country/region, and nickname being compromised, and 196 instances of unauthorized password changes. Capcom stated that there is no evidence that the actual passwords set by users were leaked, and that no credit card information was involved in the breach. For the 196 accounts where passwords were changed without authorization, the passwords have already been reset.

Capcom first discovered signs of a potential breach on October 19 and established an internal task force to block access and urgently address the matter. After it was established that customer information was leaked and passwords were changed, Capcom reported the incident to the police on the 21st. The company says it has completed the necessary emergency response measures, and services that use CAPCOM ID are currently available for use. The incident has not affected players’ ability to access any Capcom games.

The company warned users that leaked information could be subject to misuse, cautioning about potential fraudulent emails or other communications impersonating Capcom or related parties. Users are advised not to access any URLs or open attachments from suspicious emails.

Related: Two Japanese games with over a decade of service permanently shut down over critical PHP vulnerabilities. Outdated infrastructure prevents fixes