Capcom ma'lumotlar buzilishi 11,7 million akkauntga ta'sir qilganini tasdiqladi
Bill Toulas tomonidan
2026-yil 22-oktabr
16:22
0
Yaponiyaning yirik o'yin kompaniyasi Capcom o'z a'zolik xizmati CAPCOM ID buzilganini tasdiqladi va 11,7 milliondan ortiq mijozning elektron pochta manzillari va tegishli ma'lumotlari ochiqlanganini ma'lum qildi.
Elektron pochta manzillaridan tashqari, ochiqlangan ma'lumotlar qatoriga akkaunt yaratilgan sana, oxirgi kirish vaqti, kirishlar soni va oxirgi kirishda ishlatilgan IP manzil kiradi.
Capcom 43 ta akkauntning kichik to'plami uchun tug'ilgan sana, jins, taxallus va mamlakat ham ochiqlanganini aniqladi.
Yana 196 ta akkauntning kichik to'plami uchun xakerlar CAPCOM ID kirish parollarini o'zgartirib, egalarini tizimdan chiqarib yuborishga urinishgan, ammo kompaniya chora ko'rib ularni qayta tiklagan.
Bugungi ogohlantirishda o'yin kompaniyasi boshqa ro'yxatdan o'tgan a'zolarning parollari ochiqlanmaganini va kredit karta ma'lumotlari ta'sirlanmaganini aytdi.
Capcom — Resident Evil, Monster Hunter, Street Fighter va Mega Man kabi franchayzlar bilan tanilgan yapon video o'yin ishlab chiqaruvchisi va nashriyotchisi. Kompaniyada 4000 nafar xodim ishlaydi va yillik daromadi 1,24 milliard dollarni tashkil etadi.
CAPCOM ID — kompaniyaning umumiy akkaunt tizimi bo'lib, u veb-xizmatlarga kirish va ba'zi onlayn o'yinlarni o'ynash uchun ishlatiladi.
Buzilish vaqti aniq emas, ammo Capcom shubhali faoliyatni aniqlaganini va 19-oktabrda ruxsatsiz kirishni tasdiqlaganini aytdi.
Darhol tekshiruv boshlatildi va ertasi kuni mijoz ma'lumotlari buzilganligi aniq bo'ldi.
21-oktabrda kompaniya hodisani politsiyaga va Yaponiyaning Shaxsiy ma'lumotlarni himoya qilish komissiyasiga xabar qildi.
Capcom onlayn xizmatlari ta'sirlanmaganini aytdi, ammo foydalanuvchilarga so'ralmagan xabarlar va qo'shimcha ma'lumot so'ragan elektron pochta xabarlari, shuningdek URL va ilovalarni o'z ichiga olgan xabarlarga nisbatan hushyor bo'lishni tavsiya qildi.
Tekshiruv davomida Capcom kirish usulini aniqladi va shunga o'xshash hodisalarni oldini olish uchun xavfsizlik choralarini joriy etdi. Biroq dastlabki kirish bilan bog'liq tafsilotlar e'lon qilinmadi.
O'yin firmasi ta'sirlangan mijozlarga bosqichma-bosqich xabar berishini aytdi, ehtimol ta'sirlangan akkauntlar soni ko'pligi sababli, ammo mintaqaviy aloqa kanallarini qo'llab-quvvatlash so'rovlarini yuborish uchun tashkil etgan.
2020-yil noyabrda Capcom Ragnar Locker ransomware guruhi tomonidan da'vo qilingan hujumga uchragan, unda hujumchilar 1 TB ma'lumotni o'g'irlaganini da'vo qilgan. Keyinchalik kompaniya 390 000 gacha odam ta'sirlanishi mumkinligi haqida ogohlantirgan.
2021-yil aprelda Capcom hujumchilar eski VPN qurilmasi orqali kirishganini ma'lum qildi.
Hujumchilar haqiqiy ma'lumotlarga ega bo'lgach, ularning harakatlarining faqat 37 foizi bloklanadi
Umumiy oldini olish ballari dastlabki kirishdan keyin nima sodir bo'lishini yashirishi mumkin. Hujumchilar haqiqiy ma'lumotlardan foydalangach, oldini olish keskin pasayadi.
Blue Report 2026 mijozlarning ishlab chiqarish muhitlarida o'tkazilgan 338 million simulyatsiya bo'yicha texnika-texnika mudofaa choralarini o'lchaydi.
Hisobotni oling
Tegishli maqolalar:
Zeabur ikki oy ichida ikkinchi xavfsizlik buzilishidan so'ng yopilmoqda
Nippon Columbia zararli dastur hodisasi 8,6 million karaoke muxlislarining yozuvlarini ochiqladi
ASOS ma'lumotlar buzilishini ijtimoiy muhandislik hujumi va ma'lumot o'g'irlash bilan bog'ladi
Advantest ransomware hujumida shaxsiy ma'lumotlar o'g'irlanganini tasdiqladi
Times Car 6,6 million foydalanuvchi akkauntiga ta'sir qilgan ma'lumotlar buzilishini tasdiqladi
Capcom confirms data breach affecting 11.7 million accounts
By Bill Toulas
October 22, 2026
04:22 PM
0
Japanese gaming giant Capcom has confirmed that hackers breached its membership service, CAPCOM ID, exposing more than 11.7 million customer email addresses and associated information.
Apart from emails, exposed data includes account creation date, last login timestamp, number of logins, and the IP address used at the last login.
Capcom found that for a small subset of 43 accounts, dates of birth, gender, nicknames, and countries were also exposed.
For another subset of 196 accounts, the hackers changed the CAPCOM ID login passwords in an attempt to lock the owners out, but the company took action and reset them.
In an alert today, the gaming company says that passwords for all other registered members have not been exposed and that credit card information remained unaffected.
Capcom is a Japanese video game developer and publisher known for franchises such as Resident Evil, Monster Hunter, Street Fighter, and Mega Man. The company has 4,000 employees and an annual revenue of $1.24 billion.
CAPCOM ID is the company’s shared account system used for accessing its web services and playing some of its online games.
Although the timing of the breach remains unclear, Capcom said it detected suspicious activity and confirmed unauthorized access on October 19.
An investigation was launched immediately, and by the following day, it was clear that customer information had been compromised.
October 21, the company reported the incident to the police and to Japan’s Personal Information Protection Commission.
Capcom said its online services remain unaffected, but cautioned users to stay vigilant for unsolicited communications and emails requesting additional information, or messages containing URLs and attachments.
During the investigation, Capcom identified the intrusion method and implemented security measures to prevent similar incidents. However, no details related to the initial access have been shared.
The gaming firm also says it will notify affected customers in stages, likely due to the large volume of affected accounts, but it has established region-specific communication channels to submit support requests.
In November 2020, Capcom suffered an attack claimed by the Ragnar Locker ransomware gang, in which attackers claimed to have stolen 1 TB of data. The company subsequently warned that up to 390,000 people could be affected.
In April 2021, Capcom disclosed that the attackers had gained access through an old VPN device.
Once attackers have valid credentials, only 37% of their actions are blocked
Overall prevention scores can hide what happens after initial access. Once attackers are using valid credentials, prevention drops sharply.
The Blue Report 2026 measures defenses technique by technique across 338 million simulations run in customer production environments.
Get the report
Related Articles:
Zeabur shutting down after second security breach in two months
Nippon Columbia malware incident exposes 8.6 million karaoke fan records
ASOS links data breach to social engineering attack, credential theft
Advantest confirms personal information stolen in ransomware attack
Times Car confirms data breach affecting 6.6 million user accounts