Capcom says 11.7 million ID accounts were in scope of breach; 196 passwords changed
Capcom’s October 23 update put more than 11.7 million accounts within the incident’s scope and reported unauthorized password changes on 196 accounts. Its investigation continues.
Capcom said in an October 23 update that information tied to more than 11.7 million Capcom ID accounts was within the scope of unauthorized access detected on October 19. It reported unauthorized password changes on 196 accounts. The gaming company is still investigating the breach, which could put customers at risk of emails impersonating Capcom.
What Capcom’s breach figures mean
The 11.7 million figure describes accounts within the incident’s scope, according to Ginx; it is not a count of people confirmed to have had data accessed. Capcom also gave a maximum of 390,000 people potentially affected by unauthorized password changes. It said the passwords changed on 196 accounts had been reset. The scope figures could change as the investigation continues.
Capcom detected suspicious activity indicating possible unauthorized access to Capcom ID on October 19, Engadget reported. The company said it blocked access and began investigating, but confirmed that a third party had already gained unauthorized access. It later said it had identified and addressed the method used in the attack and completed emergency response measures.
Customer information and Capcom ID services
Ginx reported that Capcom’s October 22 notice listed names, telephone numbers, postal codes, addresses, gender, dates of birth, purchase history, customer inquiry history and saved address-book details among the information accessed. Capcom said credit-card information was not affected. It had not confirmed that the login passwords customers originally set were compromised, according to Ginx; the unauthorized password changes are a separate confirmed part of the incident.
Capcom ID connects players across the company’s games, including Street Fighter 6 and Monster Hunter Wilds, Ginx reported. Engadget reported that services using Capcom ID remained available, including online play in Street Fighter 6. Capcom warned users to watch for suspicious emails that could use leaked information to impersonate the company; the warning does not establish that such messages have been sent.
According to Ginx, Capcom said it would begin contacting affected customers and had set up dedicated channels for their inquiries. Engadget reported that the company had notified local police and its external security oversight advisory board. Capcom has not given a final account of the breach’s reach while its investigation remains open.
Read in depth: Technology
Airbnb to bar hosts from requiring guests to wash dishes or take rubbish off-site
The revised house rules apply to reservations booked from November 20. Hosts can still ask guests to put dishes in the sink and sort rubbish into indoor bins.
Astronomers discover first documented green star 280 light-years away
White dwarf WD J1330+6435 glows chartreuse after planetary debris enriches its atmosphere with sodium, changing how it absorbs light.
Sources and context
- Capcom confirms data breach that affected 11.7 million usersEngadget
- Capcom data breach: up to 390,000 people affectedGinx
AI-assisted article checked against the listed sources. NewsJaws did not conduct interviews or attend the reported events.