Capcom data breach exposes 11.7 million account records

Help Net Security reports that Capcom detected suspicious activity on October 19 and confirmed the intrusion the same day[1]. According to BleepingComputer, October 21, the company reported the incident to the police and to Japan's Personal Information Protection Commission.[2] The outlet adds that for 43 of those records, the exposed data also included the account holder's date of birth, gender, country or region, and nickname.[1]According to Help Net Security, Capcom says it has found no evidence that passwords set by customers were compromised.[1] The outlet reports that the attackers did, however, change the passwords on 196 accounts without authorization, and the company has since reset them.[1]GamingBible reports that a further Capcom update on October 23 confirmed that the intruder had accessed the e-Capcom online store account pages belonging to 19 of those customers.[3]Capcom warned, according to Push Square, that the stolen data "could be misused to send fraudulent emails or other communications impersonating Capcom or related parties"[4].TechRadar reports that Capcom did not discuss the identity of the attackers, or the nature of the breach.[5] According to Help Net Security, at the time of writing, no group has claimed responsibility for the attack.[1]