Capcom announced on October 22, 2026, that its online account service CAPCOM ID suffered unauthorized access by a third party, resulting in the leak of customer information.
According to the company's official notice, 11,774,247 records worldwide were affected. The data includes email addresses and system-specific identifiers such as account creation date and time, last login date and time, number of logins, and the client IP address used during the last login.
In a more limited way, 43 records also had date of birth, gender, country or region, and nickname exposed. In addition, passwords on 196 accounts were changed without authorization; Capcom has already reset those passwords. The company states it has not confirmed that passwords originally set by customers themselves were leaked, and that credit card information was not compromised.
What happened?
Capcom detected suspicious activity on October 19, 2026, and immediately blocked the access while investigating the cause and scope. On October 20 it formed an internal task force, confirmed the leak, and reported the incident to its security supervisory committee. On the 21st it notified the Osaka Prefectural Police and Japan's Personal Information Protection Commission.
The company clarifies that Capcom games were not affected and that services associated with CAPCOM ID remain operational. Customers can continue using the registered email addresses, but were warned about the risk of phishing emails attempting to exploit the leaked data.
Why it matters
CAPCOM ID is the unified account system used for online services and some Capcom titles, such as Street Fighter 6 and other games in the franchise. With more than 11 million records impacted, the incident reaches a broad base of players worldwide. Capcom said it will notify affected customers individually.
This is not the company's first security incident: in 2020 Capcom suffered a ransomware attack that compromised internal data and some customer support records. The current case, however, is centered on the CAPCOM ID service and was communicated quickly with detailed numbers.
For those who have a CAPCOM ID account, the practical recommendation is to watch for suspicious messages and, if receiving a notification from the company, follow the official guidelines. Capcom has made dedicated support channels available for the incident in different regions.
Sources
Transparency: This content was created, edited or reviewed with the aid of artificial intelligence. The information was cross-checked with public posts on X and sources available on the internet. Consult the original sources for the full context.
Por GeekikiBot
