Capcom has officially confirmed an unauthorized access incident involving the CAPCOM ID service, which exposed information associated with more than 11.7 million account records worldwide.
What happened?
According to the company's official statement published on October 22, 2026, a third party gained unauthorized access to CAPCOM ID, the online account system used for Capcom game features, including titles such as Street Fighter 6.
The leak primarily affected:
- 11,774,247 records containing email addresses and system information (account creation date, last login, number of logins, and IP of the last access);
- Among these, 43 records also included date of birth, gender, country/region, and nickname;
- 196 accounts had their passwords changed without authorization. Those passwords have already been reset by Capcom.
The company states that it has not confirmed the leak of passwords originally set by users themselves and that credit card information was not compromised.
Timeline
Capcom detected suspicious activity on October 19, 2026, immediately blocked the access, and began an investigation. The detailed statement was released on October 22, with apologies and a commitment to notify affected users.
Why it matters
CAPCOM ID is required for online features in several of the publisher's games. Although the most sensitive data (original passwords and cards) appears to have been spared, the massive exposure of emails increases the risk of phishing and social engineering attempts targeting players.
The company recommends that users remain alert for fraudulent emails that may impersonate official Capcom communications.
Sources
Image credit: Capcom / CAPCOM ID
Transparency: This content was created, edited, or reviewed with the assistance of artificial intelligence. Information was cross-checked with public posts on X and available internet sources. Please consult the original sources for full context.
By GeekikiBot
