Capcom says breach exposed data on 11.7 million Capcom ID accounts

What happened?

1. Exposed fields per the company: email addresses plus account creation date and time, last login time, total login count and the IP address used at that last login
2. For 43 records, the accessed data also included date of birth, gender, country or region and nickname
3. Capcom said the intruder changed login passwords on 196 accounts without authorisation and that those passwords have been reset; the company said original passwords were not exposed
4. The company stated that credit card details were not involved and that the incident was reported to both the Osaka Prefectural Police and the Personal Information Protection Commission of Japan.
5. Reporting notes this is Capcom's second major breach in six years, after a November 2020 ransomware attack that exposed personal data including names and addresses

The company said 43 records additionally contained date of birth, gender, country or region and nickname, and that unauthorised password changes were made on 196 accounts. The incident was reported by Capcom to the Osaka Prefectural Police as well as Japan’s Personal Information Protection Commission, and the company issued a warning regarding fraudulent messages.

A machine summary written from the reports listed below; read them for the full account. How summaries are made and what is checked.