In the early hours of Nov. 2, Japanese game developer and publisher Capcom suffered a server breach. The company, most well-known for the Street Fighter, Resident Evil, and Monster Hunter series of games, has now explained what happened and what data was stolen.
In a press release, Capcom details how it was the target of a “customized ransomware attack” after its network was compromised by the Ragnor Locker hacker group. As the BBC reports, the group posted a message on their dark-net webpage (in broken English) stating, “make a right decision and save data from leakage.” It’s believed that Capcom decided not to pay the ransom.
Capcom’s investigation is ongoing, but the company has revealed that the personal information of nine former and current employees was accessed, including their names, addresses, signatures, and passport information. The hackers also grabbed Capcom’s sales reports and financial information.
There’s also a much larger set of “potentially compromised data,” which includes the personal information of up to 350,000 customers and business partners. That breaks down into 134,000 Japanese customers who used Capcom’s customer service video game support help desk, 14,000 North American Capcom Store members, 4,000 North American Esports operations website members, 40,000 shareholders, 28,000 former employees, 125,000 job applicants, and 14,000 human resources records. The accessed data includes a mix of names, addresses, birthdays, phone numbers, email addresses, and photos.
Thankfully, financial information wasn’t accessed, with Capcom explaining, “None of the at-risk data contains credit card information. All online transactions etc. are handled by a third-party service provider, and as such Capcom does not maintain any such information internally.”
Capcom has had to classify this as potentially compromised data because log file were lost during the attack, making it difficult to verify the extent of what was accessed. The company intends to offer support for anyone who has had their personal information taken and is already in the process of contacting those individuals.