Capcom: unauthorized access to the CAPCOM ID member service

On 19 October, Capcom found traces of unauthorized access to its CAPCOM ID online member service and blocked it; on 20 October it confirmed that customer data had leaked. Email addresses of 11,774,247 accounts worldwide leaked together with account creation time, last login time, login count and last login IP address; 43 of them also included birth date, gender, country or region and nickname. Login passwords of 196 accounts had been changed by the attacker. No leak of passwords set by users or card data was found. Its second report on October 23 said that for 19 of the 196 accounts with changed passwords, all in Japan, the attacker entered the My Page of its e-Capcom shop, leaking names, addresses, phone numbers, genders, birth dates, purchase and inquiry history and address books. The investigation of the scope is complete.