From our other sites
The story
Capcom announced on October 22 that customer information was exposed due to unauthorized access. The compromised data includes email addresses and system-specific identifiers such as account creation dates and last login times, totaling 11,774,247 records worldwide. Users of multiple services are reportedly affected, including Monster Hunter Wilds, Street Fighter 6, Resident Evil Portal, and the e-Capcom online store. On 5ch’s Hardware/Industry (“Geha”) board, reactions split: some took it calmly, noting that “nothing too serious leaked” since names and addresses weren’t included, while others were angry at the steady drumbeat of breach announcements from companies lately. The thread also expanded into a debate over whether sites really need to collect birthdates and gender at sign-up in the first place.
What people said
Everywhere's getting targeted and falling these days, so at this point it's less outrage and more "well, that's just how it is now."
Seriously though—do sites even need your birthdate and gender?
I don't sign up anywhere that tries to grab that info just for a basic account.
Isn't that for account recovery if you forget your login? So you can just put in fake info—as long as you remember what fake info you used.
They don't need your actual birthdate. A simple yes/no on whether you're above the game's age rating would do. Even being generous, at most they'd need your birth year—not the month and day too.
What kind of logic is that?
—that's what the thread title should've been.
Monster Hunter Puzzle: Airou Island — everyone leaked.
Exoprimal — everyone leaked.
SF6 — everyone leaked.
Resident Evil Portal — everyone leaked.
e-Capcom online store — everyone leaked.
Seriously…?
…Yeah no, this isn't actually funny.
1. Overview of the unauthorized access (as of October 22)
(1) Leak of email addresses and system-specific identifiers (*2)
Number affected: 11,774,247 (worldwide total)
*2 Account creation date/time, last login date/time, login count, client IP at last login
Over 10 million accounts leaked—that's basically everyone, isn't it?
Is that coming next?
[Unauthorized Trading] Cyberattack hits Iwai Cosmo Securities — client stock orders placed without consent, some even executed [gure★]
https://asahi.5ch.io/test/read.cgi/newsplus/1792502852/
Registering info is fine, honestly. Japanese citizens' names, addresses, gender, age, assets, medical history, education, and everything else basically keeps leaking anyway at this point—it's practically become open data AI and private companies can use without anyone's consent.
If it does leak, I'd rather get properly compensated, even if it's just a few hundred yen. Paying out even 100 yen per person across 10 million records comes to a billion yen, so companies need to feel like it's not worth it—otherwise they'll just keep demanding more of our data.
Maybe it's because they're targeted so often that their defenses are a tier above everyone else's?
Or maybe they just haven't noticed yet.
They already got hit by ransomware before, what are you talking about?
Yeah, because all they're obligated to do after a leak is report the incident. Nothing more than that.
Background and Key Points of This Story
Capcom previously suffered a data breach from a ransomware attack back in 2020, and this latest announcement is a new unauthorized-access incident following that one. The exposed data consists of email addresses and “system-specific identifiers”—account creation dates, last login dates, login counts, and IP addresses at last login—and is said not to include names, addresses, passwords, or payment details. That distinction is exactly where thread opinion split: some felt “nothing too serious leaked,” while others were angered by the sheer scale (11.77 million records) and a growing distrust toward the steady drumbeat of corporate breach announcements, calling the company’s data handling careless. The discussion also raised the broader question of whether collecting birthdates and gender at registration is even necessary in the first place, though the thread offers no details on the intrusion method or root cause. Worth noting as context: this comes around the same time as reports of unauthorized access at a securities brokerage, amid a wider wave of attacks targeting Japanese companies.
*This article is compiled from excerpts and a summary of the 5ch (Hardware/Industry, “Geha”) thread “[Capcom] Apology and Notice Regarding Customer Information Leak Due to Unauthorized Access.”
Leave a Reply