Capcom just officially announced that they had a data breach affecting 11m+ users, discovered on October 19th and publicly announced October 22nd. This is relevant to gamers because it's sensitive account info exposed, although critical gaming functions are still accessible. So the question is what kind of data is compromised? What kind of data is safe on your account?
Capcom ID breach affects 11 million users but leaves passwords and financial data safe
The data breach specifically involved their Capcom ID system – which is their user account system for digital services. The data compromised consists of the following: – email addresses – IP addresses – login IDs – creation dates – interaction on platforms – gender – birthday – nickname for 43 users All tied to the user accounts. Not just a random data dump of unknown data.
Fortunately, there were no leaked passwords involved in this data breach. Which is a big deal for account security. But there were 196 users who had their passwords changed unauthorized.
So that's a little more invasive breach action for select users. Capcom was able to pinpoint the vulnerability and take some protective actions. Although specific technical details are being withheld for security purposes.
The good news is that no financial data (credit card info etc) was compromised in the data breach. So no immediate financial concerns. Access to video games and multiplayer functionality is not affected.
So gamers are good to go. Capcom is working on containment and communicating to affected users through official channels.
This is yet another example of the ongoing security challenges that major gaming publishers face who have a large user database. In this case Capcom's approach is to focus on containment and communicating to users. Not immediately releasing technical details. If you're an affected account user, be mindful for unauthorized actions, especially the 196 who had passwords changed.
Source: TweakTown
Discussion
0 comments