Capcom says 11.7 million CAPCOM ID records were accessed in a breach

Capcom says a third party got unauthorised access to customer information tied to CAPCOM ID, the account you need to play some of its games online, including Street Fighter 6. It posted an apology on 22 October.

The affected data covers 11,774,247 records worldwide: email addresses, plus when the account was made, when it last logged in, how many times it has logged in and the IP address used for the last login. For 43 of those records, date of birth, gender, country or region and nickname were also accessed.

Passwords were changed without permission on 196 accounts. Capcom says it has reset them, and that it hasn't found any sign that passwords customers set themselves were taken. Credit card information wasn't included.

Capcom says it spotted suspicious activity on 19 October and started blocking it straight away, then reported the incident to Osaka police and Japan's privacy regulator on 21 October. It says it has found and dealt with the method of attack, that CAPCOM ID services are still available, and that players can still access and play all its games.

Capcom will contact affected customers and warns that the leaked emails could be used for scam messages pretending to be from Capcom. Players in Oceania can contact its support team at [email protected]. Capcom hasn't said whether the breach is linked to the Street Fighter V emergency maintenance it announced on 21 October.