Japanese game company Capcom has revealed a data breach that affected 11 million email addresses and the personal information of a small number of individuals.
The incident, the gaming giant said, was discovered on October 19 and involved unauthorized access to CAPCOM ID, its shared service used for accessing online services and for playing online games.
During the intrusion, hackers stole the email addresses of 11,774,247 people, along with account information such as creation date, last login date, login number, and last login IP address.
For 43 affected customers, the hackers also compromised date of birth, gender information, country/region details, and nicknames.
In addition, Capcom determined that the attacker changed the CAPCOM ID account password for 196 of the affected users. The company said no user passwords were compromised and it has reset passwords for affected accounts.
Capcom said that it has taken measures to respond to the incident and that all services that use CAPCOM ID are still available.
“In addition, we have started to contact the target customers respectively, and we have created a specific contact point for customers in this regard,” Capcom’s automatic translation Notification of the event read
The game company said it has reported the data breach to relevant authorities and is continuing to investigate.
It also warns affected users to beware of unsolicited emails that impersonate companies or related entities and contain suspicious URLs or attachments.
“We take this matter seriously and will continue to conduct a thorough investigation, take preventative measures based on the causes identified this time, and work to strengthen our data security systems,” Capcom added.
Related: Hackers steal 1.8 million notes from Nikkei
Related: 970,000 Medi-Cal members affected by Paradigm Healthcare data breach
Related: The PHP2Shell exploit started days before the update
Related: Technology and security companies respond to PHP2Shell vulnerability
