Cybercriminals breach Capcom, exposing data from 12 million global accounts

Help Net Security reports that a third party gained unauthorised access to customer information linked to CAPCOM ID, and that Capcom detected suspicious activity on October 19 and confirmed the intrusion the same day.[2]According to Help Net Security, the exposed records include email addresses and account data such as creation dates, last-login times, login counts and the most recent IP address.[2]Engadget, citing Capcom's statement, reports that 43 accounts also exposed birth dates, gender, country or region and nicknames, and that passwords on 196 accounts were changed without authorisation.[3]GosuGamers reports that 19 affected e-Capcom accounts had more sensitive data exposed, including names, phone numbers, addresses and purchase histories.[4]The outlet says credit card information was not among the compromised data.[4]Malwarebytes notes that "the 11.7 million figure refers to affected records, so it may not represent that many individual users."[5]Help Net Security reports that Capcom notified the Osaka Prefectural Police and Japan's Personal Information Protection Commission on October 21.[2]According to GosuGamers, Capcom has not revealed how the attackers got in or who was responsible.[4]Engadget reports that Capcom said it "identified and addressed the attack method in this incident"[3]. Kotaku reports that the attack is part of a wave of AI-powered breaches hitting Japanese companies in recent weeks.[6]