Capcom phishing warning follows massive data leak
When a major gaming giant faces a data breach, the immediate concern for fans is always twofold: what data was compromised, and what steps should gamers take to protect themselves. Capcom recently disclosed a significant security incident involving its online membership service, prompting a widespread warning to the global gaming community about potential phishing attempts.
The breach impacted over 11 million customer accounts associated with the Capcom ID. The exposure, which was discovered on October 19, revealed details about user activity, including the date and time of account creation, the time of the last login, the total number of logins, and the client IP address used during that final session. Furthermore, 43 records containing personal information, such as date of birth, gender, country/region, and nickname, were also affected.
While user activity details were exposed, Capcom confirmed that sensitive financial information, such as credit card details, was not among the compromised data. The company also assured stakeholders that the core video game intellectual property remained secure, alleviating immediate fears about the safety of game content.
The incident also involved a security breach targeting account security, with 196 accounts experiencing unauthorized changes to their Capcom ID login passwords. In response, Capcom immediately reset the passwords for these affected accounts. The company stated that they were continuing a thorough investigation to determine the full scope of the impact resulting from the incident.
To ensure the safety of their community, Capcom reported the incident to the Osaka Prefectural Police and Japan’s Personal Information Protection Commission. They strongly advised customers to remain vigilant, urging them to exercise caution and refrain from accessing any suspicious URLs or opening any attached files received via email.
“If you receive any suspicious email or message, please exercise caution and refrain from accessing any URLs contained therein or opening any attached files,” the company cautioned. While details on the method of the hack were not immediately disclosed, Capcom confirmed that emergency response measures were implemented and the attack method had been identified and addressed.
Capcom emphasized its commitment to improving security moving forward. The company stated that they would implement measures to prevent recurrence and further strengthen their information security framework. They pledged to provide updates as the investigation unfolds, underscoring that they are taking this matter extremely seriously and will continue their detailed inquiry.
The company concluded by offering its sincere apologies to customers and stakeholders, affirming that the investigation will continue to ensure the integrity of user data and bolster the security of the Capcom ID platform.
Credit
