Act this weekWhat happenedAn outsider got unauthorized access to Capcom ID, the company's online account service, and affected more than 11.7 million users.
Who is affectedAnyone with a Capcom ID, including players of games like Street Fighter 6 that need it for online play.
What to do- 1Do not click links in unexpected emails that claim to come from Capcom.
- 2Visit Capcom's website by typing the address yourself instead of using an email link.
- 3Change your Capcom ID password, and change it anywhere else you reused it.
- 4Turn on extra sign-in protection for your account if it is offered.
Capcom has confirmed that someone broke into Capcom ID, its online account service, and that more than 11.7 million users were affected. The biggest risk for most people is not stolen money. It is scam emails that look like they came from Capcom.
What happened
Capcom says it spotted suspicious activity on October 19 and blocked access right away. The unauthorized access had already happened by then. The company reported it to local police and its external advisory board for security oversight. Capcom says it found and fixed the attack method. Games that use Capcom ID, including Street Fighter 6 for online play, still work.
The leak included millions of account email addresses. For 43 accounts, birth date, gender, country or region and nickname were also taken. Passwords on 196 accounts were changed without permission.
Who can relax, and what to watch
Capcom says credit card information was not part of the breach. If you have never made a Capcom ID, this incident does not touch you. If you do have one, expect phishing, which means fake emails built to trick you into clicking a link or giving up details. Capcom warned that the leaked information could be used to impersonate it.
The steps in the alert box above cover what to do. The main idea is to treat any Capcom email with suspicion and go to the company's site on your own.
What is not known yet
Capcom has not said exactly how many email addresses were exposed beyond "millions." The reports so far also do not explain how the attacker got in or who was behind it.
The takeawayIf you have a Capcom ID, ignore links in Capcom emails and change your password, especially if you use it on other sites.