started · updated
Capcom suffers data breach affecting 11.7 million CAPCOM ID users
Japanese video game publisher Capcom has confirmed a major data breach involving its CAPCOM ID online membership service. The unauthorized access, detected on October 19, 2026, resulted in the exposure of 11,774,247 customer records worldwide.
The compromised information primarily includes email addresses, account creation dates, last login timestamps, login counts, and IP addresses. In 43 specific cases, more sensitive data such as dates of birth, gender, country/region, and nicknames were also exposed. Additionally, attackers successfully changed the passwords of 196 accounts without authorization; Capcom has since reset these credentials.
In a secondary impact related to the breach, 19 accounts in Japan saw unauthorized access to the e-Capcom online store, exposing names, addresses, phone numbers, and purchase histories. Capcom emphasized that credit card information was not compromised in any part of the incident.
The company has notified the Osaka Prefectural Police and Japan's Personal Information Protection Commission. While CAPCOM ID services and games like Street Fighter 6 remain operational, Capcom has urged users to remain vigilant against potential phishing attempts using the stolen email addresses.
Entities
CAPCOM ID · Capcom · Osaka Prefectural Police · Personal Information Protection Commission · e-Capcom
Claims
What the coverage asserts, and how many sources carry each claim.
- [● 15 SOURCES] Attackers unauthorizedly changed the passwords of 196 accounts. cybersecurity-jp.com · cybernoz.com · gamingnation.nl · www.gosugamers.net · www.haberaktuel.com · +10 more
- [● 4 SOURCES] The incident was reported to the Osaka Prefectural Police and Japan's Personal Information Protection Commission. www.gosugamers.net · www.haberaktuel.com · www.tgrthaber.com · www.yenisafak.com
- [● 15 SOURCES] Leaked data includes email addresses, account creation dates, last login dates, and IP addresses. cybersecurity-jp.com · cybernoz.com · gamingnation.nl · www.gosugamers.net · www.haberaktuel.com · +10 more
- [● 15 SOURCES] A total of 11,774,247 customer records were leaked worldwide. cybersecurity-jp.com · cybernoz.com · gamingnation.nl · www.gosugamers.net · www.haberaktuel.com · +10 more
- [● 15 SOURCES] Personal information from 43 accounts, including birth dates and gender, was exposed. cybersecurity-jp.com · cybernoz.com · gamingnation.nl · www.gosugamers.net · www.haberaktuel.com · +10 more
- [● 14 SOURCES] Credit card information was not compromised in the breach. cybersecurity-jp.com · cybernoz.com · gamingnation.nl · www.haberaktuel.com · www.iphonemod.net · +9 more
- [● 15 SOURCES] Capcom identified unauthorized access to its CAPCOM ID service on October 19, 2026. cybersecurity-jp.com · cybernoz.com · gamingnation.nl · www.gosugamers.net · www.haberaktuel.com · +10 more