Capcom ID Data Breach Exposes 11.7 Million Account Records

 

Capcom has confirmed a major security breach affecting its CAPCOM ID service, exposing information associated with more than 11.7 million account records worldwide.

The Japanese publisher disclosed the incident on October 22, 2026, after detecting unauthorized access to its online account system on October 19.

According to Capcom's official investor disclosure, the incident affected 11,774,247 records containing email addresses and account-related information.

The exposed data includes account creation dates, last login timestamps, login counts, and IP addresses associated with recent sign-ins.

Capcom also confirmed that additional personal information, including birth dates, gender, country or region, and nicknames, was exposed in 43 records.

Separately, attackers changed the login passwords of 196 accounts without authorization. Capcom has already reset those passwords and is investigating the extent of the unauthorized activity.

However, the company says it has found no evidence that customers' original passwords were leaked. Credit card information was also not affected.

Capcom has implemented emergency security measures and identified the method used in the attack. CAPCOM ID services remain operational, and the company says gameplay across its titles has not been disrupted.

The publisher has reported the incident to Japanese authorities and is contacting affected customers.

Capcom is also warning players about potential phishing attempts involving emails or messages impersonating the company. Users are advised to avoid suspicious links and attachments.

The investigation remains ongoing, and Capcom says it will provide additional information if further findings emerge.