Capcom Says Breach Affected 11.7 Million Accounts

Capcom said unauthorized access affected 11,774,247 Capcom ID accounts, exposing email addresses and account activity information, and warned users to be alert for phishing attempts. The company said 43 accounts had additional personal details exposed and that 196 account passwords were changed without authorization and later reset. The information accessed included the date and time accounts were created, the total number of logins, the date and time of the last login, and the IP address used for that login. For 43 accounts, the exposed details also included date of birth, gender, country or region, and nickname. Capcom said it had found no evidence that passwords originally set by users were leaked. It also said credit-card information was not included in the breach. The company said customers can continue using the email addresses registered to their Capcom IDs. Capcom said it first detected suspicious activity on October 19 and began blocking access while investigating. It has reported the incident to the Osaka Prefectural Police and Japan’s Personal Information Protection Commission. The company said it has completed emergency response measures and identified and...