Eleven million Capcom accounts leaked, and the valuable part was just the email address

Made an account to play Monster Hunter or Street Fighter online at some point? Capcom spotted traces of unauthorised access on 19 October, cut it off the same day, and published the count on the 22nd: 11,774,247 CAPCOM ID records reached by a third party.

What went out is the email address on each account plus the housekeeping that sits beside it, when the account was created, when it last signed in, how many sign-ins it has had, and the IP address used most recently. For 43 accounts the intruder also got date of birth, gender, country and nickname. Passwords that users set themselves were not readable, although the attacker managed to change the password on 196 accounts, all of which Capcom has reset. No card details were involved, and the games and the service are running normally. Capcom notified Osaka Prefectural Police and Japan's Personal Information Protection Commission on 21 October.

Capcom's own advice is the part to hold on to, because this is where breaches like this actually cost people money. Be suspicious of email claiming to come from Capcom for the next while, and do not click the links or open the attachments. Eleven million confirmed addresses belonging to people known to be gamers is a superb mailing list if what you are selling is a fake beta key, a "your CAPCOM ID needs reverifying" page, or a launcher that is really an infostealer.

If something did arrive and you clicked before you thought, Tendvane's Safety check goes through what has installed itself on your PC and what has been set to start with Windows, which is where that kind of thing parks.