Capcom Reports Data Breach Affecting 11 Million Accounts

The company identified the breach on October 19, subsequently blocking access to compromised accounts to contain the threat. Forensic analysis revealed that 11,774,247 accounts were impacted, with attackers gaining access to email addresses, account creation timestamps, login history, and the IP addresses associated with final user sessions. While the vast majority of affected accounts saw only basic metadata exposed, 43 users had sensitive details such as dates of birth, gender, and country of residence compromised. Furthermore, 196 accounts suffered unauthorized password changes, though Capcom states these credentials have since been reset.

Despite the scale of the intrusion, Capcom maintains that there is no evidence suggesting user-set passwords were leaked or that the integrity of its game servers was compromised. The developer is currently urging players to remain vigilant against phishing attempts that may leverage the stolen email records. Users are advised to avoid clicking links or opening attachments from suspicious communications as the company continues to monitor the situation.