On October 22, Capcom announced that 11,774,247 customer records were leaked globally due to unauthorized access to its online membership service, "CAPCOM ID." The affected information includes email addresses and login details, with passwords for some accounts having been illicitly altered.
CAPCOM ID is a unified account used for the company's web services and certain online games. The leaked data includes email addresses, account creation dates, last login dates, number of logins, and the IP address from the last login. For 43 of these cases, date of birth, gender, country/region, and nickname were also compromised.
Furthermore, for 196 of the affected accounts, login passwords were illicitly changed. The company has already reset the passwords for these accounts and is continuing to investigate the full scope of the impact. Capcom states that there is no confirmation of user-set passwords being leaked, nor is credit card information included in the compromised data.
While registered email addresses remain usable, there is a risk of receiving emails impersonating Capcom or related parties, exploiting the leaked information. The company urges users to avoid accessing URLs or opening attachments found in suspicious emails.
