Capcom Says Breach Exposed Data From 11.7 Million Capcom ID Accounts
The breach exposed email addresses and system-specific identifiers, but not credit card details or user-set passwords. Capcom reset passwords for 196 accounts after unauthorized changes.
Capcom says a third party accessed information tied to 11,774,247 Capcom ID accounts. Its official disclosure says the exposed data included email addresses and system-specific identifiers, but not credit card details or passwords set by users.
For all affected accounts, the accessed information also included activity data such as each account’s creation date, last login time, total number of logins, and the IP address used for its last login. Capcom ID is required for online features in some Capcom games, including Street Fighter 6.
For 43 accounts, the accessed information also included the user’s date of birth, gender, country or region, and nickname. An attacker changed passwords for 196 accounts without authorization. Capcom reset those passwords and says it will contact the affected users.
Capcom says it has completed its emergency response and identified and addressed the attack method. Services that use Capcom ID, including games, remain available, and other accounts can continue to be used normally. The company has also established dedicated support channels for incident inquiries.
Capcom detected signs of unauthorized access on October 19, 2026, and began blocking the activity. It formed an internal response team on October 20, then reported the breach to police and Japan’s Personal Information Protection Commission on October 21. Capcom apologized to customers and stakeholders.
The investigation is ongoing. Capcom plans to strengthen its security measures and share further findings through its official website if it identifies more information that needs to be disclosed. The company also warned that exposed email addresses could make users targets for fraudulent messages impersonating Capcom, and urged them to be cautious with suspicious links and attachments.
What additional information would you want Capcom to share as its investigation continues? Follow the investigation and customer response on X, Bluesky, YouTube, Instagram, Steam, and Telegram.
