Capcom confirms CAPCOM ID breach exposing 11.7 million customer email addresses and account metadata
Capcom has confirmed that attackers breached CAPCOM ID, its shared membership and account system, exposing more than 11.7 million customer email addresses and associated account information. Capcom detected suspicious activity and confirmed unauthorized access on October 19. The following day it established that customer data had been compromised. It reported the incident to the police and to Japan's Personal Information Protection Commission on October 21. The date of the initial intrusion is unclear, and Capcom has not disclosed how the attackers got in, saying only that it identified the intrusion method and put preventive measures in place.
Detalhes técnicos
- Exposed data for all affected accounts: email address, account creation date, last login timestamp, number of logins and the IP address used at last login.
- For a subset of 43 accounts, date of birth, gender, nickname and country were also exposed.
- For another 196 accounts, the attackers changed the CAPCOM ID login passwords, apparently to lock the owners out. Capcom reset them.
- Capcom states that passwords for other members and credit card data were not exposed, and that its online services are unaffected.
- The article recalls earlier incidents: the November 2020 Ragnar Locker ransomware attack (up to 390,000 people potentially affected) and the April 2021 disclosure that attackers entered through an old VPN device.
Remediação
- Capcom is notifying affected customers in stages and has set up region-specific support channels.
- Users should be vigilant for unsolicited emails or messages requesting information or containing URLs or attachments, as the exposed emails and login metadata could support phishing.
Linha do tempo
-
Capcom confirms CAPCOM ID breach exposing 11.7 million customer email addresses and account metadata
ler a análise desta fonte ocultar
Capcom has confirmed that attackers breached CAPCOM ID, its shared membership and account system, exposing more than 11.7 million customer email addresses and associated account information. Capcom detected suspicious activity and confirmed unauthorized access on October 19. The following day it established that customer data had been compromised. It reported the incident to the police and to Japan's Personal Information Protection Commission on October 21. The date of the initial intrusion is unclear, and Capcom has not disclosed how the attackers got in, saying only that it identified the intrusion method and put preventive measures in place.
Technical Details
- Exposed data for all affected accounts: email address, account creation date, last login timestamp, number of logins and the IP address used at last login.
- For a subset of 43 accounts, date of birth, gender, nickname and country were also exposed.
- For another 196 accounts, the attackers changed the CAPCOM ID login passwords, apparently to lock the owners out. Capcom reset them.
- Capcom states that passwords for other members and credit card data were not exposed, and that its online services are unaffected.
- The article recalls earlier incidents: the November 2020 Ragnar Locker ransomware attack (up to 390,000 people potentially affected) and the April 2021 disclosure that attackers entered through an old VPN device.
Remediation
- Capcom is notifying affected customers in stages and has set up region-specific support channels.
- Users should be vigilant for unsolicited emails or messages requesting information or containing URLs or attachments, as the exposed emails and login metadata could support phishing.