Capcom Confirms Breach Affecting 11.7 Million CAPCOM ID Accounts
The disclosure puts a four-day timeline on record: suspicious activity detected Monday, an internal response headquarters stood up Tuesday, and reports filed Wednesday with the Osaka Prefectural Police and Japan's Personal Information Protection Commission, with customer notification still to come.
Reporting from 1 source: Anime News Network.
CAPCOM said Thursday that a third party gained unauthorized access to its CAPCOM ID membership service, affecting email address records and system-level identifiers for 11,777,247 people worldwide. Passwords were changed without authorization on 196 accounts, and personal records such as date of birth, gender, country, and nickname were accessed in 43 cases. CAPCOM says no credit card data was affected and that affected passwords have been reset.
CAPCOM's account of the incident runs day by day. Suspicious activity turned up on Monday, and the company blocked access and started an investigation the same day. On Tuesday it set up an internal incident response headquarters and reported the affected data to an external Information Technology Security Oversight Committee. On Wednesday it filed with the Osaka Prefectural Police and Japan's Personal Information Protection Commission. The company says it has opened dedicated customer-support channels and will notify affected customers going forward.
Synthesized by Yomimono from the 1 cited source below, including Japanese-language reporting where cited, then editorially reviewed before publishing.
Sources
- Anime News Network News Capcom Confirms Data Breach of Over 11 Million User Accounts