Capcom says Major Hack has sales and financial information theft

Capcom has provided an update on the ransomware attack earlier this month, saying sales and financial information had been tampered with, and that 350,000,000 personal information could have been stolen. Unknown game theft rumors have started to spread. Updated on its investors’ website, the company says the investigation is ongoing, but clarified that by November 16, it could confirm that sales reports, financial information and personal information of nine employees were tampered with.

Personal information for customers and business partners is scarce, as logs appear to have been lost during the attack. Capcom says as many as 350,000 records for addresses, phone numbers, email addresses, dates of birth and more could be tampered with, but explained that any potentially stolen data does not include credit card information. You can see a complete list of compromised and potentially compromised data at the bottom of this story.

Capcom says it begins contacting anyone whose personal information has been confirmed as a compromise, and says anyone wishing to inquire about their own information should contact their region’s Capcom customer support service.

The statement came amid new rumors about the content of that hack. Some claims of having access to stolen files, arising from the now-locked 4Chan post, say that between sales and financial data, the hack includes details of titles scheduled for next fiscal year, including the upcoming Monster Hunter Rise and PC ports for monsters. Hunter Stories 2, c culus VR version of Resident Evil 4, obscure games with codenames and more. IGN has not yet been able to verify any of these rumors.

We have contacted Capcom to comment on both the hack and the rumors, but received no response at the time of writing.

The following is a complete list of Capcom’s settlement and potential settlement data:

1. Verified tampering with information

i. Personal information: 9 items

Personal information of ex-employees: 5 items
(Name and signature: 2 items; Name and address: 1 item; Passport information: 2 items)
Personal information of employees: 4 items
(Name and HR information: 3 items; Name and signature: 1 item)
ii. Other information

Sales reports
Financial information

2. Potential settlement data

i. Personal information (customers, business partners, etc.): Almost max. 350,000 items

Japan: Customer Service Video Game Support Help Desk Information (Approx. 1,34,000 Items)
Name, address, phone number, email address
North America: Capcom Store Member Information (approximately 14,000 items)
Name, date of birth, email addresses
North America: Sports website parasite website members (approximately 4,000 items)
Name, email addresses, gender information
List of shareholders (approximately 40,000 items)
Names, addresses, shareholder numbers, amount of shareholdings
Information of former employees (including family) (approximately 28,000 people);
Applicant Information (approximately 125,000 people)
Name, date of birth, addresses, phone number, email addresses, photos etc.

ii. Personal information (employees and stakeholders)

Human resource information (approximately 14,000 people)

iii. Confidential corporate information

Sales data, business partner information, sales documents, development documents, etc.

There is no credit card information in any of the risky data. All transactions, online transactions, etc. are handled by a third-party service provider, and Capcom cannot maintain such information internally.

Because the overall number of potentially compromised data cannot be specifically confirmed due to issues including the loss of some logs as a result of the attack, Capcom has listed the maximum number of items currently set that have potentially been affected.

J Sk Scrabbles is the executive editor of IGN News. Follow him Twitter. Is there a tip for us? Want to discuss a potential story? Please send a news email to [email protected].