A hacker managed to break into Capcom’s online account system and potentially steal email address data on 11.7 million user accounts. 

The breach, reported today by the Japanese video game maker, affects Capcom ID, the online account system used for the company’s digital store and games, including the Street Fighter 6, Monster Hunter, and Resident Evil franchises.

The intrusion may have exposed email and IP addresses for 11.7 million accounts worldwide. Capcom also uncovered evidence that the hacker accessed the date of birth, gender, country/region, and nickname for 43 records. Another 196 accounts had their passwords changed.

Capcom detected suspicious activity related to the hack on Monday, Oct. 19, prompting an investigation and, eventually, the enforcement of emergency measures to lock down its IT systems. The source of the breach remains unclear, but the company is warning affected users to watch out for phishing emails or messages that might pretend to come from Capcom.

“This incident does not affect players’ ability to access or play any of our games," it says. Customers can still log in to their accounts, including the 196 users whose passwords were changed; Capcom has since reset the login credentials for these affected accounts.

“Going forward, Capcom will notify customers affected by this incident. Credit card information was not included among the affected information,” the company adds. 

This comes almost six years after a 2020 ransomware attack that involved data from up to 350,000 Capcom customers and business partners. The Ragnar Locker gang claimed responsibility for the attack; Europol later dismantled the group.

Source: PCMag

-Agencies