Capcom Warns of Phishing Risk After Data Breach Affects 11 Million Accounts

Capcom has revealed a data breach impacting its online membership service, compromising over 11 million customer accounts and cautioning users to be vigilant against potential phishing scams. The developer behind Resident Evil, Monster Hunter, and Street Fighter stated that a third party accessed customer information linked to Capcom ID on October 19. Globally, 11.7 million email address records were affected, exposing details such as account creation date and time, last login date and time, login count, and the client IP address used during the last login.

Among these, 43 records containing date of birth, gender, country/region, and nickname were compromised, and 196 accounts experienced unauthorized changes to their Capcom ID login passwords. Capcom has already reset the passwords for these accounts and is "continuing to investigate the scope of any impact resulting from this incident."

Despite the severity of the breach, Capcom emphasized that passwords created by customers themselves were not leaked, and credit card information was not among the affected data. The company does not expect its video games to be impacted.

Capcom reported the incident to the Osaka Prefectural Police and Japan's Personal Information Protection Commission. It assured customers they can continue using the email addresses registered with Capcom ID but warned that the compromised information could be misused to send fraudulent emails. "If you receive any suspicious email or message, please exercise caution and refrain from accessing any URLs contained therein or opening any attached files," Capcom advised.

While Capcom did not detail how the hack occurred, it confirmed that emergency response measures are complete and that it has "identified and addressed the attack method involved in this incident." The company stated: "Capcom takes this matter extremely seriously and will continue its detailed investigation. Based on the findings, it will implement measures to prevent recurrence and further strengthen its information security framework. Should any additional facts requiring disclosure be identified, Capcom will promptly provide updates through the company's official website and other appropriate channels. Capcom would once again like to express its sincere apologies to its customers and all other stakeholders."