Capcom admits company data leak is worse than expected

GAMEFINITY.ID, Jakarta – Capcom has confirmed that the personal data leak it suffered late last year was worse than initially thought, with the total number of people potentially compromised rising by 40,000 to 390,000. The Resident Evil publisher first confirmed in November that it had fallen victim to a ransomware attack, which saw hundreds of thousands of personal data stolen from its servers, including the names and addresses of customers and former employees.

On Tuesday (12/1/2021), the company provided an update on its investigation into the breach. Capcom admitted, having verified that 16,406 personal information from people had been stolen, up from 9 in November.

The stolen data included names, addresses, contact details, and HR information for 3,248 business partners, 3,994 employees and 9,164 former employees. Hackers also stole sales reports, financial information, game development documents, and more. Capcom claims, because the third-party provider handles online transactions, no credit card data was compromised.

As VGC reports, files from the leak are actively being circulated online, including personal data and documents mentioning games and content that have yet to be announced. In total, Capcom said the maximum number of potential customers, business partners and other external parties whose personal information may have been compromised in the attack was around 390,000 people, an increase of 40,000 from the previous report.

That includes 134,000 items from Japanese customer support, 14,000 items from the North American Capcom Store, and 4,000 items from its Esports website. Such information includes name and email, and for Japanese addresses and telephone numbers.

“Capcom expresses its sincere apologies for any complications and concerns this may have caused to its potentially affected customers, as well as its many stakeholders,” Capcom said.

As reported by last November, the Resident Evil publisher was the victim of an attack by the Ragnar Locker hacker group. Capcom said it had been asked for a ransom for data stolen from its servers. At the time, it was reported that more than 1TB of data had been stolen during the hack, with the hacker group demanding 11 million USD in bitcoins to restore the files. If no agreement is made, then the data will be published or sold.

Capcom has set up a dedicated Japan telephone line for individuals who wish to inquire about potentially compromised personal information (0120-400161). North American customers are advised to contact their customer support.

Share :