On October 22, Capcom acknowledged a massive user data leak. A hacker managed to breach Capcom ID and gain access to data from 11.7 million accounts:
We recently discovered that a third party gained unauthorized access to our systems, resulting in the leakage of some personal data of our users. We apologize to our users and all affected parties for the significant inconvenience and concern caused by this incident.
Among the data obtained by the attacker: email addresses; date and time of account creation and last login; number of logins and the IP address used during the last login.
In 43 cases, access was also gained to date of birth, gender, country/region, and nickname.
Access to passwords was not obtained, but the hacker was able to change passwords for 196 accounts. Capcom has already reset these passwords to prevent account hijacking.
According to Capcom, the hacker did not obtain data about payment cards used as a result of the leak.
Capcom is currently conducting an investigation and promises to take “measures to prevent similar incidents, taking into account the identified causes” and noted that it will work to further strengthen its information security system.