Up to 350,000 people affected by Capcom ransomware attack

Update following the initial disclosure suggests personal information and sensitive corporate material was compromised

Capcom has confirmed an attack which crippled its systems earlier this month was a customised ransomware attack and may have compromised the personal details of up to 350,000 individuals. 

The Japanese video games developer detected a security breach that affected its internal file and email systems on 2 November, when some of the company’s networks experienced issues that limited employee access to Capcom systems. 

It’s since become clear the company was targeted by a group called Ragnar Locker, which destroyed and encrypted data on its servers. Capcom approached the police and began an internal investigation to understand the full scale of the attack.

Further information now confirms anxieties that personal information, employees’ data, and sensitive corporate material was compromised during the incident, with up to 350,000 individuals affected. 

“Investigation and analysis of this incident took additional time due to the targeted nature of this attack, which was carried out using what could be called tailor-made ransomware, as was covered in some media reports, aimed specifically at the company to maliciously encrypt the information saved on its servers and delete its access logs,” the company said. 

“Capcom regrets that this report could not be made sooner than today. The company asks that everyone potentially affected by this incident practice an abundance of caution, looking out for any suspicious packages received by mail or messages that could potentially be received.”

The personal information of former employees compromised includes their names and signatures, addresses and passport information, while the personal information of current employees includes name and HR information, as well as name and signature. Other information stolen includes sales reports and financial data.

Among the confidential corporate information compromised in the hack, the company’s sales data, business partner information, sales documentation, and development documents, were among the items accessed. 

None of the at-risk data contained credit card information since all online transactions are handled by a third-party service provider. Capcom, as such, doesn’t hold such information itself. The exact number of people affected, meanwhile, cannot be determined as some of the logs were lost in the attack, so the company offered the maximum number of individuals potentially affected.

Related Resource

The business guide to ransomware

Everything you need to know to keep your company afloat

The business guide to ransomware - whitepaper from DattoDownload now

To mitigate the effects, the company has installed protective software onto its systems, shut down suspicious transmissions, and carried out a reconstruction of its servers. Capcom has also commissioned a third-party security firm to inspect system issues stemming from the incident, the results of which will be published separately.

The firm has also arranged a structure of reporting and consulting with a major software company, security specialist vendor and law offices with extensive knowledge of security.

06/11/2020: Games company Capcom hit by cyber attack

Japanese games developer Capcom has suffered a security breach that affected its internal file and email systems, the company has revealed.

Famous for video games such as “Resident Evil” and “Street Fighter”, Capcom said it first noticed problems in the early hours of 2 November, when some of the Capcom Group networks experienced issues that limited access to certain systems, including email and file servers.

The company has confirmed that this was due to "unauthorised access carried out by a third party" and that it has "halted some operations of its internal networks as of November 2".

Capcom has not said who was behind the attack or how they managed to breach its systems. It added that, at present, “there is no indication that any customer information was breached”.

“This incident has not affected connections for playing the company's games online or access to its various websites,” the statement added. It also said that the company is now cooperating with law enforcement agencies “as well as other related authorities while both carrying out an investigation and taking measures to restore its systems”.

According to reports from Bleeping Computer, Capcom may have been the victim of a ransomware attack as the publication was able to access a ransom note created on Capcom's computers during the attack.

In a separate announcement, Capcom warned that it was not in a position to respond to contact requests made through its investor relations form.

“We are currently unable to reply to inquiries and/or to fulfill requests for documents via this form following the network issues that began November 2, 2020,” said Capcom.

Featured Resources

Consumer choice and the payment experience

A software provider's guide to getting, growing, and keeping customers

Download now

Prevent fraud and phishing attacks with DMARC

How to use domain-based message authentication, reporting, and conformance for email security

Download now

Business in the new economy landscape

How we coped with 2020 and looking ahead to a brighter 2021

Download now

How to increase cyber resilience within your organisation

Cyber resilience for dummies

Download now

Recommended

Ransomware criminals look to other hackers to provide them with network access
ransomware

Ransomware criminals look to other hackers to provide them with network access

17 Jun 2021
Four in five ransomware victims suffer repeat attacks
ransomware

Four in five ransomware victims suffer repeat attacks

16 Jun 2021
FBI still frowns on ransomware payments
ransomware

FBI still frowns on ransomware payments

11 Jun 2021
New ransomware targets unpatched Microsoft Exchange servers
ransomware

New ransomware targets unpatched Microsoft Exchange servers

1 Jun 2021

Most Popular

How to find RAM speed, size and type
Laptops

How to find RAM speed, size and type

16 Jun 2021
What is HTTP error 400 and how do you fix it?
Network & Internet

What is HTTP error 400 and how do you fix it?

16 Jun 2021
Ten-year-old iOS 4 recreated as an iPhone app
iOS

Ten-year-old iOS 4 recreated as an iPhone app

10 Jun 2021