Capcom confirms breach of 11.7 million CAPCOM ID records
Original title: Gaming Giant Capcom Confirms Data Breach Exposed Users’ Personal Information
Exposed data is mostly emails and login metadata; 196 accounts had passwords changed, and card data was not taken.
Capcom said a third party accessed CAPCOM ID customer data, which it detected as suspicious activity on October 19, 2026. As of an October 22 notice, the company estimated 11,774,247 records of email addresses and system identifiers, plus 43 records with date of birth, gender, country or region and nickname. It has not confirmed theft of customer-set passwords, reset 196 accounts whose passwords were changed without authorization, and said credit cards were unaffected. Games and CAPCOM ID services stayed online. Capcom reported the incident to Osaka police and Japan's Personal Information Protection Commission and warned of impersonation emails.
Unconfirmed: Capcom has not said how the attacker got in or confirmed that original passwords were stolen.
- System identifiers include account creation and last login times, login counts and last-login IP.
- Unauthorized access was confirmed the same day it was detected, October 19.
- An internal response headquarters was set up on October 20.
- Emergency measures and a report to regulators and police were completed by October 21.
- Capcom says original customer passwords were not confirmed compromised.
Impact: Emails, login metadata and 43 profile records exposed
| Product | Affected |
|---|---|
| CAPCOM ID | — |
- 1.Treat unexpected Capcom emails cautiously and do not open links or attachments.
- 2.Users of the 196 reset accounts should use the new credentials Capcom issued.
From the original article
2 min read at infosecurity-magazine.com
Japanese video games giant Capcom confirmed unauthorized access to its online account system
By Kevin Poireault · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.