Capcom Data Breach Exposes 11.7 Million Email Addresses
2026-10-24T14:51:38Z•8ca211e60ae54093652222d6903b9bacab4e520ba7e85a55dad842166e83407c
CVE-2026-109618CVE-2026-109619CVE-2026-113380CVE-2026-114625CVE-2026-115560AI-assisted attacksAPTArista VeloCloud OrchestratorCISA KEVChina-linked threat actorMicrosoft 365PHPPHP2ShellSafePaySignalaccount compromiseactively exploited vulnerabilitycredential theftcybercrimedata breachlaw enforcementprivacy exposureransomwareremote code executionsupply chain compromise
What happened
The feed reports multiple major cybersecurity developments, including a Capcom breach exposing approximately 11.7 million email addresses and account details; actively exploited critical vulnerabilities in Arista VeloCloud Orchestrator, PHP, and Signal; widespread pre-disclosure exploitation attempts against PHP2Shell; a China-linked campaign targeting Microsoft 365 tenants through a ConnectWise compromise; SafePay ransomware activity affecting more than 600 organizations; and a major international cybercrime enforcement operation.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityaffairs
- Record identifier
- 8ca211e60ae54093652222d6903b9bacab4e520ba7e85a55dad842166e83407c
- Enrichment time
- 2026-10-24T14:51:38Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.