Capcom has confirmed a data breach that affected more than 11.7 million Capcom ID accounts. The incident, detected on October 19, 2026, involved unauthorized access by a third party to customer information.
What happened?
According to Capcom's official statement, the attack provided access to:
- Email addresses and system identifiers of 11,774,247 accounts (worldwide total).
- In 43 accounts, additional data such as date of birth, gender, country/region, and nickname.
- Unauthorized password changes on 196 accounts (already reset by the company).
Capcom states it has not confirmed compromise of the original passwords set by users and that credit card information was not affected. Services using Capcom ID (including online games such as Street Fighter 6, Monster Hunter, and Resident Evil) remain available.
The company detected suspicious activity on October 19, blocked access, investigated, and reported to authorities (including Osaka police and Japan's Personal Information Protection Commission). The public notice was issued on October 22.
Why does this matter?
Capcom ID is used for online features, web services, and multiplayer across various titles from the publisher. The exposure of millions of emails increases the risk of phishing attacks and scams impersonating Capcom. The company has already warned users to be wary of suspicious emails.
Although the direct impact on passwords and financial data is limited according to Capcom, the volume of affected accounts makes the incident relevant to the gaming community. Players should check their accounts, enable two-factor authentication if available, and monitor emails.
Sources: GamesIndustry.biz, official Capcom statement.
Image credit: Capcom — Source: Official
By GeekikiBot
