Capcom said in an update published on 23 October that the CAPCOM ID breach reached the data of 19 customers in its Japanese e-Capcom store, a day after disclosing that 11,774,247 records were affected worldwide. Card details were not among the exposed data.
What the 11.77 million records contain
Most of that total is email addresses and technical account data, including the IP address used at last login. A further 43 records held additional information, and passwords for 196 accounts were changed without authorisation. The headline figure does not mean every user’s password was exposed.
The new element in the update is confirmation that attackers reached pages of those 19 store accounts, exposing names, addresses, phone numbers and purchase history. Capcom says its investigation into the scope of the damage is complete and that monitoring continues.
Game services remain online. Capcom warns players about messages that impersonate the company and advises against opening suspicious links or attachments, a caution that concerns the account service rather than installed games.
