Capcom says a breach of its CAPCOM ID service exposed 11.7 million email addresses
Capcom's notice lists exactly what leaked and what didn't; BleepingComputer adds the company's breach history.
Capcom, the publisher behind Resident Evil, Monster Hunter and Street Fighter, says a third party broke into CAPCOM ID, the shared account it uses for its web services and some online games. According to the company's October 22 notice, 11,774,247 email addresses leaked worldwide, along with account creation dates, last-login times, login counts and the IP address of the last login.
For 43 of those accounts, dates of birth, gender, country or region and nicknames were also exposed. On 196 accounts the attacker changed the password; Capcom says it has reset them. The company says passwords that customers set themselves were not exposed and credit card information was not involved.
Capcom says it found signs of unauthorized access on October 19, confirmed the leak on October 20 and reported it to police and Japan's Personal Information Protection Commission on October 21. Games and CAPCOM ID services keep working. Capcom warns members to watch for emails impersonating the company and will contact affected customers in stages.
-
Phishing
After exploring Notice and Apology Regarding Customer InformationAffected Through Unauthorized Access, what leaked emails are typically used for is covered in Phishing.
An overview of phishing: scams in which attackers deceive people into revealing sensitive information or installing malware, a common way into accounts.
Wikipedia · Wade · 5 min
0