Japanese video game publisher Capcom has disclosed a breach of its CAPCOM ID membership service affecting 11,774,247 account records.
Each record contains an email address and account details such as the creation date, last login time, number of logins and the IP address used at the most recent sign-in. A few dozen records also included birth date, gender, country or region and nickname. Capcom said it has found no evidence that customer-set passwords were stolen and that payment card information was not involved. Attackers did change the passwords on fewer than 200 accounts, which have since been reset.
The company detected suspicious activity on October 19 and reported the incident to police and to Japan’s Personal Information Protection Commission on October 21. Games and online services remain available.
What players should do
Capcom warns that the stolen email addresses could be used for fraudulent messages posing as the company. Be suspicious of unexpected emails about your account, go directly to the official site instead of clicking links, and turn on two-factor authentication wherever it is offered.
Sources: Help Net Security, TechRadar, Windows Central.
Image: illustration created for AABEAT TV. It does not depict the people, places or products named in this story.
