Capcom ID breach exposes 11.7M account email addresses
CAPCOM ID (Capcom online account service)
Capcom says a third party gained unauthorized access to CAPCOM ID, the account needed to play some Capcom games online. 11,774,247 records worldwide had email addresses plus account creation time, last login time, login count and last-login IP exposed; 43 also had date of birth, gender, country/region and nickname. Passwords were changed without authorization on 196 accounts (already reset). Capcom says it has not confirmed any leak of customer-set passwords, and no credit card data was involved. Detected Oct 19; reported to Osaka Prefectural Police and Japan's PPC on Oct 21. Expect phishing impersonating Capcom.
Why this severity: 11.77M email addresses and login metadata exposed; 196 accounts had passwords changed; no payment data
- Started
- Oct 19, 2026
Affected
- CAPCOM ID accounts (11,774,247 records worldwide)
Fixed in
- Capcom says emergency measures are complete and the attack method was identified and addressed; services remain available
Timeline4
Public disclosure: 11,774,247 records (email, account creation and last-login times, login count, last-login IP), 43 with date of birth, gender, country and nickname, 196 accounts with unauthorized password changes (reset). No credit card data. Affected customers will be notified.
SourceCapcom reports the incident to the Osaka Prefectural Police and Japan's Personal Information Protection Commission.
SourceCapcom sets up an internal incident response headquarters and confirms customer data was accessed and some account passwords were changed.
SourceCapcom detects suspicious activity on CAPCOM ID, starts blocking the access and confirms unauthorized access the same day.
Source
Advisories2
News & write-ups3
- Capcom confirms data breach affecting 11.7 million accountsBleepingComputer · Oct 22, 2026
- Resident Evil makers Capcom reveal data breach has affected over 11 million Capcom ID accounts, warn against potential phishing emailsRock Paper Shotgun · Oct 22, 2026
- Capcom confirms major data breach affecting more than 11.7 million Capcom ID accounts worldwideNotebookcheck · Oct 22, 2026
Posts1
Capcom says a data breach resulted in the details of more than 11 million Capcom ID accounts being accessed. Credit card details are unaffected, it says. t.co/EPFUQ5uty6 t.co/ECTHLtmaPt
Notes & caveats
How the attacker got in has not been disclosed. Capcom says it has not confirmed compromise of customer-set passwords.
Get an email when a new major security incident drops. No spam, unsubscribe any time.
