Another week, another company announcing a huge data breach that may have resulted in your personal data being spewed across the Internet.
This time, it’s Capcom. The company has announced a substantial data breach effecting 11,774,247 Capcom ID records containing account creation date/time, last login date/time, number of logins, and the IP address used for the last login.
Note, that is “records” and not 11,774,247 accounts. Accounts can have multiple records tied to them, and Capcom does not make it clearly how many actual accounts and people were effected, which is frustrating.
An account is someone’s Capcom ID login. A record is an entry in a database containing information.
What we do know is that 43 of those records also contained “additional personal information: including things like date of birth, gender, country/region and nickname.
196 accounts within the total number have had unauthorised password changes.
Given the information Capcom is supplying, though, it does seem highly likely that each “record” can be attributed to an individual account. If true, that does mean nearly 12 million accounts have been affected.
Capcom’s notice also only specifies that the information was accessed, but not specifically say it if was stolen.
According to Capcom, they detected suspicious activity on October 19 and confirmed that it was not authorised. They began blocking it and implementing emergecy protocols. By October 20, they had established an incidence response headquarters, confirmed customer information had been accessed and managed to identify the unauthorised password changes. On October 21, Capcom report the incident to Osaka Prefectural Police and Japan’s Personal Information Protection Commision.
Capcom says services remain online and its games can still be played. They say they will reach out to effected customers, and their only warning it so be wary of Emails or messages impersonating Capcom.
Capcom ID is basically the company’s online account used for any online play, so like Street Fighter 6 if you want to go fight online, whereas something like Pragmata doesn’t require it.
