Capcom has confirmed a major security breach in its Capcom ID service, resulting in the leakage of information related to over 11.7 million accounts worldwide. The company stated that it has taken emergency measures to block unauthorized access and is currently investigating the full impact of the incident.
External parties accessed information for 11,774,247 Capcom ID accounts. This information included account creation dates, last login dates, number of logins, and the IP addresses used during the most recent login. Additional information for another 43 accounts was also leaked, including dates of birth, gender, country/region, and nicknames.
Although the attackers did not obtain users' original passwords, they unauthorizedly changed the passwords for 196 accounts. Capcom has reset these passwords to prevent account takeovers; aside from users whose passwords were changed, other users should be able to use their Capcom IDs normally.
According to Capcom, the company first detected signs of unauthorized access on October 19 and began blocking related activities while investigating the cause of the incident. The following day, the company established an internal investigation team and reported the matter to the police and Japan's Personal Information Protection Commission on October 21.
Capcom ID is a free account required for using online features in certain games, with Street Fighter 6 being one of the titles that utilize this account. Given that a large number of email addresses have been exposed, Capcom warns users to be vigilant against fraudulent emails impersonating the company and advises against opening suspicious links or attachments.
Capcom will notify users whose information was accessed and will continue to investigate the incident while implementing measures to prevent similar occurrences in the future. If other facts requiring disclosure are discovered, the company will update information through its official website and other channels.