Ma'lumotlar buzilishi
Capcom ma'lumotlar buzilishi 11 million kishiga ta'sir qildi
Xakerlar CAPCOM ID'dan 11 million elektron pochta manzilini o'g'irladi va 196 ta hisobning kirish parollarini o'zgartirdi.
Muallif
Ionut Arghire
| 23-oktabr, 2026 (ET bo'yicha 4:34)
Yaponiyaning Capcom o'yin kompaniyasi 11 million elektron pochta manzili va kichik sonli shaxslarning shaxsiy ma'lumotlarini o'z ichiga olgan ma'lumotlar buzilishini e'lon qildi.
O'yin giganti aytishicha, hodisa 19-oktabrda aniqlangan va CAPCOM ID — onlayn xizmatlarga kirish va onlayn o'yinlar o'ynash uchun ishlatiladigan umumiy xizmat — ga ruxsatsiz kirishni o'z ichiga olgan.
Buzilish paytida xakerlar 11 774 247 kishining elektron pochta manzillarini, shuningdek, hisob yaratish sanasi, oxirgi kirish sanasi, kirishlar soni va oxirgi kirishning IP manzili kabi hisob ma'lumotlarini o'g'irladi.
Ta'sirlangan 43 ta mijoz uchun xakerlar tug'ilgan sanalar, jins ma'lumotlari, mamlakat/mintaqa tafsilotlari va taxalluslarni ham buzib kirgan.
Bundan tashqari, Capcom hujumchilar ta'sirlangan foydalanuvchilarning 196 ta CAPCOM ID hisob parollarini o'zgartirganini aniqladi. Kompaniya hech qanday foydalanuvchi parollari buzilmaganini va ta'sirlangan hisoblar uchun parollarni allaqachon qayta o'rnatganini aytadi.
Capcom hodisaga javob choralarini amalga oshirganini va CAPCOM ID'dan foydalanadigan barcha xizmatlar mavjudligini aytadi.
Reklama. O'qishni davom ettirish uchun pastga aylantiring.
"Bundan tashqari, biz maqsadli mijozlar bilan ketma-ket bog'lanishni boshladik va ushbu masala bo'yicha mijozlar uchun maxsus aloqa nuqtasini tashkil etdik", — deb o'qiladi Capcomning hodisa haqidagi e'lonining avtomatik tarjimasi.
O'yin kompaniyasi ma'lumotlar buzilishini tegishli organlarga xabar qilganini va uni tekshirishni davom ettirayotganini aytadi.
Shuningdek, u ta'sirlangan foydalanuvchilarga kompaniya yoki tegishli tashkilotlar nomidan yuborilgan va shubhali URL yoki ilovalarni o'z ichiga olgan kutilmagan elektron pochta xabarlaridan ehtiyot bo'lishni ogohlantiradi.
"Biz bu masalani jiddiy qabul qilamiz va bu safar aniqlangan sabablar asosida takrorlanishning oldini olish choralarini ko'rish, batafsil tekshiruvlar o'tkazish va axborot xavfsizligi tizimimizni yanada mustahkamlash ustida ishlashni davom ettiramiz", — deb qo'shimcha qildi Capcom.
Bog'liq: Xakerlar Nikkei'dan 1,8 million yozuvni o'g'irladi
Bog'liq: Paradigm Healthcare ma'lumotlar buzilishi 970 000 Medi-Cal a'zosiga ta'sir qildi
Bog'liq: PHP2Shell ekspluatatsiyasi yamoqlardan bir necha kun oldin boshlandi
Bog'liq: Texnologiya va xavfsizlik kompaniyalari PHP2Shell zaifliklariga javob berdi
Yozgan: Ionut Arghire
Ionut Arghire — SecurityWeek uchun xalqaro muxbir.
Kundalik axborot byulleteni
So'nggi kiberxavfsizlik tahdidlari, tendentsiyalar va mutaxassis fikrlari haqida xabardor bo'lish uchun SecurityWeek elektron pochta axborot byulleteniga obuna bo'ling.
Biznes elektron pochta*
emailsignupsource
Qo'shimcha ma'lumot uchun Maxfiylik siyosatimizni o'qing.
Ionut Arghiredan ko'proq
- Signal zaifligi zararli qo'ng'iroq qiluvchilarga qo'ng'iroqlarni to'xtatishga imkon beradi
- Splunk, SolarWinds yangi xavfsizlik yangilanishlarini e'lon qildi
- Cisco bir nechta mahsulotlar bo'yicha 34 ta zaiflikni tuzatdi
- PHP2Shell ekspluatatsiyasi yamoqlardan bir necha kun oldin boshlandi
- PHP2Shell yamoqlari birinchi ekspluatatsiya urinishlari sensorlarga yetib kelganda e'lon qilindi
- Chrome'ning 353 ta yangi xavfsizlik tuzatishlarining aksariyati xotira xatolaridan iborat
- Brauzerlar qayta tiklanadigan shaxsiy kalitlar tufayli eMudhra oraliq CA'larini blokladi
- Xitoy AI modeli AQSh pudratchisi uchun yozilganda ko'proq buziladigan kod yozadi
So'nggi yangiliklar
- Sobiq Unit 8200 ofitserlari agentik SecOps startapi Mave uchun 34 million dollar yig'di
- Boshqa yangiliklarda: Tor chiqish relaylari o'g'irlandi, banklar yovuz AI agentlarini aniqladi, o'zini qayta tiklaydigan macOS ransomware
- Mirai botnet operatorlari PHP2Shell hujumlariga qo'shildi, ASLR aylanib o'tish ekspluatatsiyalari paydo bo'ldi
- Xitoy APT AI pentest vositasi Artex'dan ConnectWise hujumlarida foydalanadi
- Hujumchilar to'rt oy ichida uchinchi Arista VCO nol kun zaifligini ekspluatatsiya qiladi
- Quest Diagnostics ma'lumotlar buzilishi "ma'lum bemor yozuvlari"ni fosh qildi
- LiteLLM yangi ta'minot zanjiri hujumida buzildi
- Atlassian ma'lumotlar markazi va server mahsulotlari bo'yicha 75 ta kamchilikni tuzatdi
Trendda
Texnologiya va xavfsizlik kompaniyalari PHP2Shell zaifliklariga javob berdi
Xitoy APT AI pentest vositasi Artex'dan ConnectWise hujumlarida foydalanadi
Mirai botnet operatorlari PHP2Shell hujumlariga qo'shildi, ASLR aylanib o'tish ekspluatatsiyalari paydo bo'ldi
Boshqa yangiliklarda: Tor chiqish relaylari o'g'irlandi, banklar yovuz AI agentlarini aniqladi, o'zini qayta tiklaydigan macOS ransomware
PHP2Shell yamoqlari birinchi ekspluatatsiya urinishlari sensorlarga yetib kelganda e'lon qilindi
PHP2Shell: Ochiq muhim PHP kamchiliklari uchun ommaviy ekspluatatsiya yaqinlashmoqda
Quest Diagnostics ma'lumotlar buzilishi "ma'lum bemor yozuvlari"ni fosh qildi
Signal zaifligi zararli qo'ng'iroq qiluvchilarga qo'ng'iroqlarni to'xtatishga imkon beradi
Kundalik axborot byulleteni
So'nggi tahdidlar, tendentsiyalar va texnologiya haqida xabardor bo'lish, shuningdek, soha mutaxassislarining chuqur fikrlarini olish uchun SecurityWeek elektron pochta axborot byulleteniga obuna bo'ling.
Biznes elektron pochta*
emailsignupsource
Qo'shimcha ma'lumot uchun Maxfiylik siyosatimizni o'qing.
Vebinar: Google Workspace'dagi AI kirish xavfi allaqachon mavjud
19-oktabr, 2026
Google Workspace'ga ulangan AI vositalari millionlab nozik elektron pochta va fayllarga kirishi mumkin. Tashkilotingiz xavfini aniqlash va AI kirishini boshqarish uchun ramka o'rganish uchun ushbu sessiyaga qo'shiling.
Ro'yxatdan o'ting
Virtual tadbir: CISO Forum 2026 sammiti
10 va 11-noyabr, 2026
CISO'lar, yuqori darajadagi kiberxavfsizlik rahbarlari, amaliyotchilar, soha mutaxassislari va boshqa xavfsizlik rahbarlarini amaliy tajriba almashish va korporativ kiberxavfsizlik strategiyasini shakllantiradigan masalalarni ko'rib chiqish uchun birlashtiramiz.
Ro'yxatdan o'ting
Harakatdagi odamlar
Cequence Security Russ Schaferni CMO etib tayinladi.
Mona Harrington DHS'da Kiber integratsiya bo'yicha yordamchi direktor etib tayinlandi.
iCOUNTER Mark H. FitzPatrickni CFO etib tayinladi.
Harakatdagi ko'proq odamlar
Mutaxassis fikrlari
AI dasturiy ta'minot xavfsizligining kaliti tezlik emas, balki yetuklikdir
Sizning dasturchilaringiz AI qabul qilish shkalasida qayerda joylashgani xavfsizlik xavfini qanday hal qilishingizga haqiqiy ta'sir ko'rsatadi. (Matias Madou)
Zamonaviy kiberhujumlarga qarshi kurashda kontekst qirol
Kontekstual himoya xavfsizlik jamoalariga signallarni bog'lash, keyingi qadamni oldindan ko'rish va tahdidlarni kuchayishidan oldin to'xtatishga yordam beradi. (Etay Maor)
AI hujum tezligini o'zgartirdi, xavfsizlik asoslarini emas
AI zaifliklarni aniqlash va ekspluatatsiya qilishni tezlashtirgan sari, virtual yamoqlash hali ham chuqur himoya va kuchli ilova xavfsizligi asoslariga bog'liq. (Joshua Goldfarb)
Kelajak uchun katta rejalar tuzgan to'rtta kiber tahdid
- AI, ta'minot zanjiri ta'siri, kvant hisoblash va geosiyosiy ziddiyat xavfsizlik dasturlarini sinovdan o'tkazmoqda. Buzilishlarga tayyorgarlik kundalik operatsiyalarning bir qismiga aylanishi kerak. (Steve Durbin)
Oxiridan boshlang: Agentik tuzatishni qanday yoqish mumkin
Agentik tuzatish ishonch harakati emas. Biz tanish muammolarni tuzatish haqida gapiryapmiz, notanish xavf haqida hukm chiqarish emas. (Nadir Izrael)
Data Breaches
11 Million Impacted by Capcom Data Breach
The hackers stole 11 million email addresses from CAPCOM ID and changed the login passwords for 196 accounts.
By
Ionut Arghire
| October 23, 2026 (4:34 AM ET)
*
Japanese gaming company Capcom has disclosed a data breach impacting 11 million email addresses and the personal information of a small number of individuals.
The incident, the gaming giant says, was discovered on October 19 and involved unauthorized access to CAPCOM ID, its shared service used for accessing online services and for playing online games.
During the intrusion, the hackers stole the email addresses of 11,774,247 people, along with account data such as creation date, last login date, number of logins, and the last login’s IP address.
For 43 of the affected customers, the hackers also compromised dates of birth, gender information, country/region details, and nicknames.
Additionally, Capcom determined that the attackers changed the CAPCOM ID account passwords for 196 of the affected users. The company says that no user passwords were compromised and that it has already reset the passwords for the affected accounts.
Capcom says it implemented incident response measures and all services using CAPCOM ID remain available.
Advertisement. Scroll to continue reading.
“In addition, we have started to contact the target customers sequentially, and we have established a dedicated contact point for customers regarding this matter,” an automated translation of Capcom’s incident notice reads.
The gaming company says it has reported the data breach to the relevant authorities and continues to investigate it.
It also warns the affected users to be wary of unsolicited email messages impersonating the company or related entities and containing suspicious URLs or attachments.
“We take this matter seriously and will continue to conduct detailed surveys, take measures to prevent recurrence based on the causes identified this time, and work to further strengthen our information security system,” Capcom added.
Related:Hackers Steal 1.8 Million Records From Nikkei
Related:970,000 Medi-Cal Members Affected by Paradigm Healthcare Data Breach
Related:PHP2Shell Exploitation Started Days Before Patches
Related:Tech and Security Companies Respond to PHP2Shell Vulnerabilities
Written ByIonut Arghire
Ionut Arghire is an international correspondent for SecurityWeek.
Daily Briefing Newsletter
Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.
Business Email*
emailsignupsource
Read our Privacy Policy for more information.
More from Ionut Arghire
- Signal Vulnerability Lets Malicious Callers Block Hang-Ups
- Splunk, SolarWinds Release Fresh Security Updates
- Cisco Patches 34 Vulnerabilities Across Multiple Products
- PHP2Shell Exploitation Started Days Before Patches
- PHP2Shell Patches Land as First Exploitation Attempts Hit Sensors
- Memory Bugs Account for Most of Chrome’s 353 New Security Fixes
- Browsers Block eMudhra Intermediate CAs Over Recoverable Private Keys
- Chinese AI Model Writes More Hackable Code When Told It’s for US Contractor
Latest News
- Former Unit 8200 Officers Raise $34 Million for Agentic SecOps Startup Mave
- In Other News: Tor Exit Relays Hijacked, Banks Spot Rogue AI Agents, Self-Rebuilding macOS Ransomware
- Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge
- China APT Uses AI Pentest Tool Artex in ConnectWise Attacks
- Attackers Exploit Third Arista VCO Zero-Day in Four Months
- Quest Diagnostics Data Breach Exposed ‘Certain Patient Records’
- LiteLLM Compromised in Fresh Supply Chain Attack
- Atlassian Patches 75 Flaws in Data Center and Server Products
Trending
Tech and Security Companies Respond to PHP2Shell Vulnerabilities
China APT Uses AI Pentest Tool Artex in ConnectWise Attacks
Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge
In Other News: Tor Exit Relays Hijacked, Banks Spot Rogue AI Agents, Self-Rebuilding macOS Ransomware
PHP2Shell Patches Land as First Exploitation Attempts Hit Sensors
PHP2Shell: Mass Exploitation Looms for Leaked Critical PHP Flaws
Quest Diagnostics Data Breach Exposed ‘Certain Patient Records’
Signal Vulnerability Lets Malicious Callers Block Hang-Ups
Daily Briefing Newsletter
Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.
Business Email*
emailsignupsource
Read our Privacy Policy for more information.
Webinar: The AI Access Risk Already in Your Google Workspace
October 19, 2026
AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access.
Register
Virtual Event: CISO Forum 2026 Summit
November 10 & 11, 2026
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
Register
People on the Move
Cequence Security has appointed Russ Schafer as CMO.
Mona Harrington has been named Assistant Director for Cyber Integration at DHS.
iCOUNTER has appointed Mark H. FitzPatrick as CFO.
More People On The Move
Expert Insights
*
The Key to AI Software Security Isn’t Speed, It’s Maturity
Where your developers sit on the AI adoption scale has a real impact on how you are addressing security risk.(Matias Madou)
Context Is King in the Fight Against Modern Cyberattacks
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.(Etay Maor)
AI Has Changed Attack Speed, Not Security Fundamentals
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.(Joshua Goldfarb)
Four Cyber Threats Harboring Big Plans for the Future
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.(Steve Durbin)
Begin at the End: How to Enable Agentic Remediation
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.(Nadir Izrael)