The developer of the Street Fighter series of brawling games has disclosed that a cyber security incident has compromised the email addresses of more than 11 million customers.
“Capcom Co., Ltd. (Capcom) has determined that certain customer information associated with CAPCOM ID, an online membership account service operated by the company, was subject to unauthorised access by a third party,” the company said in an October 22 disclosure notice.
“Capcom sincerely apologises for the complications and concern this has caused its customers and other stakeholders.”
The company has confirmed that 11,774,247 emails have been impacted, alongside system-specific data such as the date and time of account creation, the last login, number of logins, and client IP addresses.
A further 43 records also exposed date of birth, gender, country/region, and nickname, while Capcom also found 196 accounts whose passwords had been changed.
“Capcom has not confirmed any compromise of CAPCOM ID account login passwords originally set by customers themselves. However, the company has confirmed that passwords were changed without authorisation on 196 accounts,” the company said.
“The passwords associated with these accounts have already been reset, and the company continues to investigate the scope of any impact resulting from this incident.”
Capcom said it first detected “suspicious activity” on October 19, after which it blocked the unauthorised access and began an investigation. By October 20, the company had established an incident response headquarters and confirmed customer information had been accessed.
Capcom informed the Osaka Prefectural Police and Japan’s Personal Information Protection Commission of the incident on October 21.
While the company has said that email addresses associated with a CAPCOM ID could continue to be used, customers should nonetheless beware of malicious activity.
“... there is a possibility that the affected information could be misused to send fraudulent emails or other communications impersonating Capcom or related parties,” Capcom said.
“If you receive any suspicious email or message, please exercise caution and refrain from accessing any URLs contained therein or opening any attached files.”
The company added that it had completed its emergency response measures, and that it was in the process of notifying customers impacted by the incident.
Cyber Daily understands that Australian customers have already begun receiving breach notifications as of Friday morning.
“Capcom would once again like to express its sincere apologies to its customers and all other stakeholders.”
Want to see more stories from trusted news sources?Make Cyber Daily a preferred news source on Google.
