Back Securityweek 11 Million Impacted by Capcom Data Breach
Japanese gaming company Capcom has disclosed a data breach impacting 11 million email addresses and the personal information of a small number of individuals.
The incident, the gaming giant says, was discovered on October 19 and involved unauthorized access to CAPCOM ID, its shared service used for accessing online services and for playing online games.
During the intrusion, the hackers stole the email addresses of 11,774,247 people, along with account data such as creation date, last login date, number of logins, and the last login’s IP address.
For 43 of the affected customers, the hackers also compromised dates of birth, gender information, country/region details, and nicknames.
Additionally, Capcom determined that the attackers changed the CAPCOM ID account passwords for 196 of the affected users. The company says that no user passwords were compromised and that it has already reset the passwords for the affected accounts.
Capcom says it implemented incident response measures and all services using CAPCOM ID remain available.
“In addition, we have started to the target customers sequentially, and we have established a dedicated point for customers regarding this matter,” an automated translation of Capcom’s incident notice reads.
The gaming company says it has reported the data breach to the relevant authorities and continues to investigate it.
It also warns the affected users to be wary of unsolicited email messages impersonating the company or related entities and containing suspicious URLs or attachments.
“We take this matter seriously and will continue to conduct detailed surveys, take measures to prevent recurrence based on the causes identified this time, and work to further strengthen our information security system,” Capcom added.
Related: Hackers Steal 1.8 Million Records From Nikkei
Related: 970,000 Medi-Cal Members Affected by Paradigm Healthcare Data Breach
Related: PHP2Shell Exploitation Started Days Before Patches
Related: Tech and Security Companies Respond to PHP2Shell Vulnerabilities
Ionut Arghire is an international correspondent for SecurityWeek.
More from Ionut Arghire
Splunk, SolarWinds Release Fresh Security Updates
Cisco Patches 34 Vulnerabilities Across Multiple Products
PHP2Shell Exploitation Started Days Before Patches
PHP2Shell Patches Land as First Exploitation Attempts Hit Sensors
Memory Bugs Account for Most of Chrome’s 353 New Security Fixes
Browsers Block eMudhra Intermediate CAs Over Recoverable Private Keys
Chinese AI Model Writes More Hackable Code When Told It’s for US Contractor
PHP2Shell: Mass Exploitation Looms for Leaked Critical PHP Flaws
Quest Diagnostics Reports Cyber Breach Affecting ‘Certain Patient Records’
LiteLLM Compromised in Fresh Supply Chain Attack
Atlassian Patches 75 Flaws in Data Center and Server Products
Iran’s Prince of Persia APT Hosts C&C in US for First Time Since 2016
Hacker Conversations: Corey Thuen and the Evil Bit
Indurex Raises $8 Million to Expand Industrial Cybersecurity Platform
Signal Vulnerability Lets Malicious Callers Block Hang-Ups
Tech and Security Companies Respond to PHP2Shell Vulnerabilities
Flipboard Whatsapp Whatsapp Email
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
