More than 11 million user accounts were caught up in a data breach, Capcom has confirmed. Anyone who has signed up for an account with the Street Fighter and Resident Evil publisher should watch their inbox.
The company said it will reach out to affected customers from here on. Customer-support channels dedicated to the breach are already open, so people on the list have a place to send their questions.
How the week unfolded
Events moved quickly. On Monday, Capcom noticed suspicious activity, cut off access immediately and launched an investigation. Before the day was out, it had confirmed the unauthorized access and rolled out emergency measures.
Tuesday saw the company form an internal incident response headquarters to collect information. Capcom confirmed what information had been affected and passed that on to its external Information Technology Security Oversight Committee.
The formal reports went out on Wednesday, when Capcom notified both the Osaka Prefectural Police and Japan’s Personal Information Protection Commission.
The investigation isn’t finished
Capcom’s investigation is still ongoing. There’s no final accounting yet, and more details should come out as the company gets in touch with affected users.
Going forward, the publisher said it intends to introduce prevention measures and strengthen its information security framework.
That’s a huge number of accounts for a company whose catalog runs from Street Fighter and Resident Evil to Monster Hunter, Ace Attorney and Mega Man, among others.