Capcom says unauthorised access to CAPCOM ID affected 11,774,247 email-address records worldwide. Its 23 October update also confirms that an intruder accessed the Japanese e-Capcom shopping accounts of 19 customers after changing their passwords.

The company says credit-card information was not among the affected data. Games and services using CAPCOM ID remain available, according to its 22 October notice.

What information was affected?

The initial disclosure lists email addresses and account activity information, including creation and last-login times, login counts and the IP address used for the last login. A smaller group of 43 records also included birth dates, gender, country or region and nicknames.

Capcom confirmed unauthorised password changes on 196 accounts and said those passwords had been reset. It had not confirmed exposure of the original passwords chosen by customers. Those are different issues: changed passwords do not, by themselves, establish that everyone’s existing password was stolen.

The follow-up identifies 19 Japanese shopping accounts

The 23 October follow-up says 19 of the password-changed accounts were used to access e-Capcom account pages. These records were in Japan. Exposed information included names, telephone numbers, addresses, dates of birth, purchase and customer-inquiry histories, and saved address-book entries.

Capcom said it found no further information compromised through the password changes on the other accounts. It described its investigation into the incident’s scope as complete, while saying monitoring and work to prevent a repeat would continue.

What South African players should watch for

The 11.77 million figure is worldwide, not a count of South African users. Capcom has not provided a South African total in these notices, and the 19 shopping records should not be presented as local cases.

Capcom warns that affected details could be used in messages or calls impersonating the company. Its advice is to avoid links and attachments in suspicious communications. For help, the notice directs Europe, Middle East and Africa customers to the official support form.

CAPCOM ID is the publisher’s unified account for its games and web services. The official portal also carries the incident notice. Use those official pages for updates rather than treating an unsolicited message as proof that your individual account was affected.

Featured image: official CAPCOM ID service artwork, Source: Capcom. ©CAPCOM. Images illustrate the account service, not the intrusion.