The attackers reportedly demanded Capcom to contact them by 8:00 a.m. Japan time by Nov 11. It did not meet the hacker’s deadline. As a result, hackers released some of the private data to the public domain. Only a portion of the content is viewable, including images of passports, according to media reports.
“Because the overall number of potentially compromised data cannot specifically be ascertained due to issues including some logs having been lost as a result of the attack, Capcom has listed the maximum number of items it has determined to potentially have been affected at the present time,” the company said on November 16.
Capcom emphasized that “All online transactions etc. are handled by a third-party service provider, and as such Capcom does not maintain any such information internally. At-risk data does not contain any credit card information,” Capcom confirmed.
Capcom is working with “local law enforcement” regarding the matter. The company is currently consulting with the Osaka Prefectural Police Department who began work on the case immediately after the attack.