Capcom’s breach disclosures put the exposed CAPCOM ID records at 11.7 million, mostly email addresses, but a much smaller number points to the more direct harm. Of the 196 CAPCOM ID accounts whose passwords an intruder changed, 19 were then used to reach customers’ account pages on e-Capcom, the company’s online store in Japan, where names, phone numbers, addresses, birth dates, purchase histories and saved address books were affected.

Capcom laid that out in an update dated Oct. 23 , a day after its first notice said CAPCOM ID, the unified account players use for Capcom web services and to play some of its games online, had been “subject to unauthorized access by a third party.” Engadget, which reported the breach to U.S. readers on Saturday, focused on the phishing risk for the wider user base and noted that Street Fighter 6 needs the account for online play.

What the 11.7 million records actually contain

The big tally is 11,774,247 records worldwide.…