卡普空披露超1100万Capcom ID账户信息泄露

Capcom today revealed that the revered Japanese game developer had been hacked, with a major data breach revealing information on over 11m accounts registered via Capcom ID.

According to the information released by Capcom, the information accessed by an unauthorized third party included 11,774,247 records of account information such as date and time of account creation, date and time of last login, number of logins, IP used during last login (effectively revealing location), and email addresses associated with the account. This was the vast majority of the information that has been identified as of today, but in some cases more information has been confirmed to have been affected.

In 43 cases that additional information included date of birth, gender, country/region, and nickname, enough information especially combined with the above for criminals to relatively easily gather additional information, as date of birth is a common check for many companies. In 196 cases, there were unauthorized changes to Capcom ID passwords as those with the information changed the passwords without authorization. Capcom has stated that they have already reset passwords associated with those accounts.

Despite the vast amount of data that was reached in some cases, Capcom states that no credit card information was among the affected information. They will be notifying customers impacted by this incident. Additionally, they state that they have taken actions and fixed the vulnerability that was used to gain access ot the information and that services that use Capcom ID, including various games the company makes, are available.

Per Capcom they noticed suspicious activity on October 19th, and began to investigate, finding out that the unauthorized access had occurred and began implementing their emergency measures, and seeking to identify and address the attack. The next day they set up a team to investigate the attack, and found that customer informaiton had been accessed, and reported it to their technology oversight committee - an external advisory board. Following that yesterday, October 21st, they reported the situation to the Osaka Police, and to the Japanese Personal Information Commission, while continuing to investigate the situation internally.

This comes at a time when vulnerabilities on the internet are being found and exploited at record paces due to generative, and specifically, agentic AI. This week we also had the revelation of new major 0 day vulnerabilities on PHP which has resulted in governments around the world closing some webpages, as well as many other sites going down until they are able to address the issue, which was exploited before it was found publicly. It means having strong password security, as well as keeping a close eye on what emails are sent to you, and other information is more important than ever right now. 

If you think you were impacted by the Capcom data breach (which we lack information on how it occurred still), or receive an email about it, and have further questions Capcom is providing dedicated customer support channels for you to contact based on your region. 

Japan

Dedicated Capcom ID Data Security Incident Support Line
Telephone (toll-free): 0120-801-271
Hours: 10:00 a.m. to 8:00 p.m. (JST)

North, Central and South America

Capcom USA Customer Support Page
Inquiry Form: https://www.capcom-support.com/hc/en-us/requests/new

Europe, Middle East and Africa (EMEA)

Capcom Europe Customer Support
Inquiry Form: https://www.capcom-support.com/hc/en-us/requests/new

Email: feedback@capcom.com

Asia (excluding Japan) and Oceania

Capcom Europe Customer Support
Email: info-asia@capcom.com
 

Outside of that, make sure to change your passwords, use strong ones, and keep an eye on your general internet security because it seems that a lot of issues from different places are going to be coming. Otherwise, enjoy games, and try not to let it take over your life with worries.

A longtime lover of speculative fiction, in almost all its forms, Don joined TechRaptor in 2014 on a whim sending in an application as he was looking for… More about Don