Capcom: ransomware that steals before it encrypts
The games company was hit by ransomware, and the group says it took data too. Backups don’t solve the leak.
Capcom, the maker of Resident Evil and Street Fighter, was hit by a ransomware attack earlier this month. The group behind it says it stole a large amount of data before encrypting systems, and threatens to publish it.
This is now the normal pattern: steal, then encrypt, then threaten to leak. Good backups help you restore systems. They don’t stop the data from being published.
So defence needs both:
- Stop them getting in: MFA on remote access and email, fast patching of VPNs, blocking macros.
- Notice them moving: alerts on new admin accounts, unusual logins and large data transfers out.
- Limit what one account can reach, so the attacker can’t copy everything.
- Know where personal data lives, so you can tell people quickly if it leaks.