Capcom Publishes Official Statement on Ransomware Cyber Attack, Apologies For Possible Customer Info Leak
Capcom published a new statement regarding the November 2 ransomware cyber attack, most notably listing potential personal data breaches.
Capcom on November 16 issued an official statement regarding the ransomware cyber attack it has been targeted by. In the statement (Japanese, English) Capcom most notably started with an apology. While Capcom previously stated on November 4: “There is no indication that any customer information was breached”, the investigations’ results as of November 16 now proved there is a possibility information about Capcom customers and business partners have been leaked.
Possibly leaked personal information include names, addresses, phone numbers, email addresses, birth dates, gender information. The statement has a detailed list by region and categories of all possibly leaked personal information. The situation could be worse. as we can note that the list doesn’t include passwords or credit card info.
Capcom explained that the unauthorized access to its internal system, the cyber attack, was discovered before dawn on November 2, and how it took swift measures to minimize the impact of the attack. Most notably shutting down its system. Requesting the help of a third-part cybersecurity company. Reporting to and consulting with a major software company, a major security specialist vendor, law offices specialized in cybersecurity. The Osaka Prefecture Police Department, the General Data Protection Regulation in Europe, and the Personal Information Protection Commission in Japan.
Next, Capcom explained the attack was a made to order ransomware that specifically, “skillfully” targeted Capcom, including how information on the servers have been encrypted and the access logs deleted. Which makes it difficult to investigate the full extent of the attack.
Lastly, Capcom mentioned it is safe for players around the world to keep playing Capcom games online, that it will take necessary steps so this never happens again, and that it believes the effects of this incident on Capcom Group’s business results (for the fiscal year ending March 31, 2021) will be negligible. Capcom will continue coordinating with law enforcement authorities in the world and give follow up reports on the investigation’s results.