Capcom says unauthorized access exposed 11,774,247 customer records
Original title: Japanese Game Maker Capcom Has Confirmed – 11,774,247 Customer Records Exposed
Exposed CAPCOM ID data includes emails and login activity; attackers changed passwords on 196 accounts, which Capcom reset.
Japanese game publisher Capcom disclosed on October 22, 2026, that unauthorized access to its CAPCOM ID service affected 11,774,247 records worldwide. Exposed fields include email addresses, account creation and last-login times, login counts, and the IP used at the latest login. Forty-three records also held dates of birth, gender, country or region, and nicknames. Credit cards were not included, and Capcom has not confirmed compromise of customers’ original passwords. Games and online services remain available while the investigation continues.
Unconfirmed: How the attackers got in is not publicly explained, and Capcom has not confirmed that original customer passwords were compromised.
- Suspicious activity was detected on October 19; unauthorized access was confirmed that day.
- Capcom reported the incident to Osaka police and Japan’s privacy commission on October 21.
- The public notice does not name a vulnerability, entry point, or attacker.
- Capcom warns exposed data could be used in fraudulent emails, but no campaign is confirmed.
Impact: Email addresses, account activity, and some personal details exposed
- 1.Avoid links and attachments in suspicious messages claiming to be from Capcom or related parties.
- 2.Watch for Capcom’s official customer notifications and use the stated regional support channels.
From the original article
2 min read at cybersecuritynews.com
Capcom has announced plans to notify customers after unauthorized access to its CAPCOM ID service affected 11,774,247 records worldwide. The Japanese game publisher disclosed the incident on October 22, 2026, saying the exposed information included email addresses and details of account activity. Attackers also changed passwords on 196 accounts without permission.
By Abinaya · cybersecuritynews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.