Capcom Says Breach Exposed Data From 11.7 Million Capcom ID Accounts
Credit card details and user-set passwords were not accessed, but Capcom reset 196 passwords after unauthorized changes.
Capcom says a third party accessed information tied to 11,774,247 Capcom ID accounts in a breach detected this week. Credit card details and passwords set by users were not accessed.
Email addresses for all affected accounts were exposed, along with account activity data such as when each account was created, its last login time, its total number of logins, and the IP address used for its last login. Capcom ID is required for online features in some Capcom games, including Street Fighter 6.
For 43 accounts, the accessed information also included the user’s date of birth, gender, country or region, and nickname. The attacker changed passwords for 196 accounts without authorization. Capcom reset those passwords and says it will contact the affected users.
Capcom says it has completed its emergency response and identified and addressed the attack method. Services that use Capcom ID, including games, remain available, and other accounts can continue to be used normally. The company has also established dedicated support channels for inquiries about the incident.
Capcom detected signs of unauthorized access on October 19, 2026, and began blocking the activity. The company formed an internal response team on October 20, then reported the breach to police and Japan’s Personal Information Protection Commission on October 21. Capcom apologized to customers and stakeholders.
The investigation is ongoing. Capcom says it plans to strengthen its security measures and share further findings through its official website if it identifies more information that needs to be disclosed.
Capcom warned that exposed email addresses could make users targets for fraudulent messages impersonating the company. It advised users to be cautious with suspicious links and attachments.
What additional information would you want Capcom to share as its investigation continues? Follow the investigation and customer response, along with other gaming security news, on X, Bluesky, YouTube, Instagram, Steam, and Telegram.
