Capcom detected and confirmed unauthorized access on October 19 and disclosed on October 22 that more than 11.7 million account emails, creation dates, login timestamps and last-login IP addresses were exposed. Attackers changed passwords on 196 accounts to lock owners out; Capcom reset them. Card data and other passwords were not affected.
What to do: Intrusion path closed per Capcom; staged notifications; phishing warning.
· 17 days ago · 11.7 million accounts · BleepingComputer
SourcesBleepingComputerPrivacy Guides roundupcapcom.co.jpHelp Net SecurityBing News: data breachBing News: data breachSecurityWeekBing News: data breach
Why this score
Over 11 million accounts (impact 3), completed intrusion with account takeovers (exploitability 2), gaming sector (criticality 0).