Capcom has confirmed that the recent incident security, which took place in early November and affected its systems , was an attack by the Ragnar Locker ransomware , which potentially led to the leakage of customer files .
The Japanese gaming company admitted that cybercriminals gained access to network as well as data stored on Capcom Group systems.
Capcom says ithas “verified that some personal information,” adding that the ransomware “destroyed and encrypted data on its servers.”
In fact, the hackers demanded a ransom, but it seems that Capcom did not succumb to blackmail.
Capcom provides a detailed list of confirmed and potentially affected data , including personal information of former employees (names, signatures, addresses, and passport details) .
According to the company, some sales reports and financial information have also been affected. However, no further details about this data have been provided.
The list of data that may have been leaked (it is not certain) includes: personal information of customers, business partners and others, shareholder lists (names, addresses, share numbers, amounts), data of former employees and their families (names, dates of birth, addresses, phone numbers and more), human resources data, confidential corporate information (partner files, sales documents and more), etc.
The company emphasizes that no credit card details have been affected, as payments are managed by a third-party service.
Capcom said that due to the problems caused by the Ragnar Locker ransomware attack, it is not possible to verify the amount of data that has been exposed. For this reason, the company listed all data that may have been affected.
The Ragnar Locker ransomware attack took place on November 2. Email systems and a number of file servers were affected, and the company temporarily suspended some services to stop the attack.
The company is working with Japanese and US authorities , as well as external security experts, to investigate the attack.
Capcom apologizes to all those who may have been affected by the ransomware attack and pledges to take steps to prevent anything similar from happening again.
Source: ZDNet
