Capcom says breach exposed 11.77 million account records
Capcom says unauthorised access exposed 11,774,247 records tied to its CAPCOM ID service, including email addresses, account activity and recent login IP addresses. Birth dates, gender, region and nicknames appeared in 43 records; passwords were changed without permission on 196 accounts, which Capcom has reset. The company says it has not confirmed any exposure of customer-set passwords or credit card information, and its services and games remain available.
Bottom line — Capcom has addressed the attack method and is contacting affected customers as its investigation continues.
Go deeper 4
-
Capcom detected suspicious activity on 19 October 2026 and reported the incident to police and Japan’s Personal Information Protection Commission on 21 October.
-
The company says it has identified and addressed the attack method, but has not publicly described how access was gained.
-
Capcom warns that exposed email addresses could be used in messages impersonating the company or its partners.
-
Capcom advises recipients of suspicious messages not to open attachments or follow their links.