Overview
- This week Capcom detected unauthorized access that exposed details for 11,774,247 Capcom ID accounts, the company says.
- The attacker accessed email addresses and system-specific identifiers including account creation and last-login timestamps, number of logins, and last-login IP addresses.
- A very small number of accounts had extra personal fields exposed: 43 records included date of birth, gender, country or region, and nickname.
- Attackers could not read user-set passwords but changed passwords on 196 accounts, which Capcom has reset, and the company says it will notify affected users.
- Capcom says no credit card data was taken, it has opened a formal investigation, and the breach follows a 2020 ransomware incident that underscores wider reputational and phishing risks for players who use Capcom ID to access online game features.