[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f_rV5gpu_VsiKpbhWVMsWVjhtvYLWDpBSVEGGymhLcMg":3},{"article":4,"iocs":41,"watch_terms":42,"solutions":43,"lesson":124},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":23,"category":24,"article_tags":28},"b8a0cd8f-abcb-44bd-bc84-e790c6e2b7a0","Japanese Game Maker Capcom Has Confirmed – 11,774,247 Customer Records Exposed","japanese-game-maker-capcom-has-confirmed-11-774-247-customer-records-exposed-e7048b","Capcom has announced plans to notify customers after unauthorized access to its CAPCOM ID service affected 11,774,247 records worldwide. The Japanese game publisher disclosed the incident on October 22, 2026, saying the exposed information included email addresses and details of account activity. Attackers also changed passwords on 196 accounts without permission. Capcom has reset those […] The post Japanese Game Maker Capcom Has Confirmed – 11,774,247 Customer Records Exposed appeared first on Cyber Security News.","Japanese game maker Capcom has announced that its CAPCOM ID service was accessed without authorization, exposing 11,774,247 customer records worldwide. The exposed data includes email addresses, account activity details, and for a smaller subset, dates of birth and gender. Attackers also changed passwords on 196 accounts, which Capcom has since reset.","Capcom confirms 11.7M customer records exposed via CAPCOM ID service.","https:\u002F\u002Fcybersecuritynews.com\u002Fcapcom-confirmed-customer-records-exposed\u002F","https:\u002F\u002Fcybersecuritynews.com\u002Fwp-content\u002Fuploads\u002F2026\u002F10\u002FJapanese-game-maker-Capcom-has-confirmed-11774247-Customer-Records-Exposed.webp","2026-10-23T14:37:14+00:00","2026-10-23T15:08:57.299209+00:00",7,[17,20],{"name":18,"type":19},"Capcom","vendor",{"name":21,"type":22},"CAPCOM ID","product","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":23,"icon":25,"name":26,"slug":27},null,"Breaches","breaches",[29,31,36],{"category":30},{"id":23,"icon":25,"name":26,"slug":27},{"category":32},{"id":33,"icon":25,"name":34,"slug":35},"614132b8-5837-4952-b8b5-c6c9a32a1d85","Privacy","privacy",{"category":37},{"id":38,"icon":25,"name":39,"slug":40},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[18,21],{"controls":44,"vendors":123},[45,74,100],{"slug":46,"name":47,"problem":48,"products":49},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",[50,58,66],{"vendor_slug":51,"vendor_name":52,"vendor_logo":53,"product_slug":54,"product_name":55,"url":56,"description":57},"acalvio","Acalvio","\u002Fvendor-logos\u002Facalvio.png","shadowplex-identity-protection","ShadowPlex Identity Protection","https:\u002F\u002Fwww.acalvio.com\u002Fproducts\u002Fidentity-protection\u002F","Decoy accounts and credentials that expose identity attacks and credential misuse early.",{"vendor_slug":59,"vendor_name":60,"vendor_logo":61,"product_slug":62,"product_name":63,"url":64,"description":65},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-identity-protection","Falcon Identity Protection","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fnext-gen-identity-security\u002Fidentity-protection\u002F","Detection of identity attacks against Active Directory and Entra ID, with risk-based MFA.",{"vendor_slug":67,"vendor_name":68,"vendor_logo":69,"product_slug":70,"product_name":71,"url":72,"description":73},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","defender-for-identity","Microsoft Defender for Identity","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fsiem-and-xdr\u002Fmicrosoft-defender-for-identity","Detects attacks against on-premises Active Directory and hybrid identities.",{"slug":75,"name":76,"problem":77,"products":78},"security-monitoring-siem","Security monitoring (SIEM)","Logs from everywhere end up in one place, with alerts that someone actually sees.",[79,87,92],{"vendor_slug":80,"vendor_name":81,"vendor_logo":82,"product_slug":83,"product_name":84,"url":85,"description":86},"google","Google","\u002Fvendor-logos\u002Fgoogle.png","google-security-operations","Google Security Operations","https:\u002F\u002Fcloud.google.com\u002Fsecurity\u002Fproducts\u002Fsecurity-operations","Cloud SIEM and SOAR, formerly Chronicle.",{"vendor_slug":67,"vendor_name":68,"vendor_logo":69,"product_slug":88,"product_name":89,"url":90,"description":91},"sentinel","Microsoft Sentinel","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fsiem-and-xdr\u002Fmicrosoft-sentinel-siem","Cloud SIEM and automated response, built on Azure.",{"vendor_slug":93,"vendor_name":94,"vendor_logo":95,"product_slug":96,"product_name":97,"url":98,"description":99},"guardsix","Guardsix","\u002Fvendor-logos\u002Fguardsix.png","guardsix-siem","Guardsix SIEM","https:\u002F\u002Fguardsix.com\u002Fproduct\u002Fsiem","SIEM with automation, developed and hosted in Europe.",{"slug":101,"name":102,"problem":103,"products":104},"incident-response-retainer","Incident response retainer","Experts are on call before the worst day, not searched for during it.",[105,113,118],{"vendor_slug":106,"vendor_name":107,"vendor_logo":108,"product_slug":109,"product_name":110,"url":111,"description":112},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","unit-42-retainer","Unit 42 Retainer","https:\u002F\u002Fwww.paloaltonetworks.com\u002Funit42\u002Fretainer","Incident response retainer with Unit 42, including preparation services.",{"vendor_slug":59,"vendor_name":60,"vendor_logo":61,"product_slug":114,"product_name":115,"url":116,"description":117},"incident-response","CrowdStrike Incident Response","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fservices\u002Fincident-response\u002F","Incident response services, available on retainer.",{"vendor_slug":80,"vendor_name":81,"vendor_logo":82,"product_slug":119,"product_name":120,"url":121,"description":122},"mandiant-incident-response","Mandiant Incident Response","https:\u002F\u002Fcloud.google.com\u002Fsecurity\u002Fconsulting\u002Fmandiant-incident-response-services","Incident response services from Mandiant, available on retainer.",[],{"slug":125,"title":126,"body":127,"framework_refs":128,"framework_notes":136},"capcom-breach-exposes-117m-customer-records-via-unauthorized-access","Capcom Breach Exposes 11.7M Customer Records via Unauthorized Access","Attackers gained unauthorized access to Capcom's CAPCOM ID service, exposing nearly 12 million customer records including email addresses, account activity, dates of birth, and gender data. The breach was compounded by attackers successfully changing passwords on 196 accounts, indicating insufficient authentication controls or monitoring around privileged account actions. This incident highlights the critical need for robust access controls, anomaly detection, and proper data minimization practices. When a gaming platform stores personal data at this scale, the impact of a single access control failure becomes massive, affecting millions of users worldwide.",[129,130,131,132,133,134,135],"NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control","CIS Control 17: Incident Response Management","GDPR Article 32","ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities","NIST SP 800-53 SI-2: Flaw Remediation","CIS Control 14: Security Awareness and Skills Training","NIS2 Article 21(2)(b)",{"GDPR Article 32":137,"NIS2 Article 21(2)(b)":138,"NIST SP 800-53 SI-2: Flaw Remediation":139,"CIS Control 17: Incident Response Management":140,"CIS Control 14: Security Awareness and Skills Training":141,"ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities":142,"NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control":143},"Exposing nearly 12 million EU customer records including personal data such as dates of birth and gender requires appropriate technical and organizational security measures under GDPR, and this breach indicates those measures were insufficient.","NIS2 explicitly requires incident handling policies and access control measures for operators of digital services; the scale of this breach and the ability of attackers to modify accounts reflects a gap in these required security practices.","Timely identification and remediation of security flaws in the CAPCOM ID service, as required by this control, could have closed the vulnerability that allowed attackers to gain unauthorized access to millions of records.","The ability of attackers to change passwords on nearly 200 accounts before detection suggests gaps in incident response readiness; a mature IR process with predefined playbooks would have identified and contained the breach faster.","Ensuring that development and operations staff understand secure authentication design and data protection best practices would reduce the likelihood of deploying an ID service with exploitable access control weaknesses.","If the unauthorized access exploited an unpatched vulnerability or misconfigured authentication mechanism, this control's requirement to systematically identify and remediate technical weaknesses would have directly reduced the attack surface.","The unauthorized access to the CAPCOM ID service and subsequent password changes on 196 accounts indicate weak authentication controls; this framework item mandates strong identity verification and access management to prevent exactly this type of intrusion."]