< Back to situations

Monitor this situation.

[SITUATION] · [ACTIVE] · [TECHNOLOGY]

2 clusters · 76 sources · 4 days · First seen · Last updated

Capcom data breach

Overview

Japanese video game publisher Capcom confirmed a major data breach affecting approximately 11.7 million Capcom ID records worldwide. The unauthorized access to the company’s unified online membership service was first detected on October 19, 2026.

The breach primarily exposed email addresses and system metadata, such as account creation dates, login timestamps, and IP addresses. A smaller subset of records—specifically 43 accounts—included personal details like dates of birth, gender, country or region, and nicknames. Additionally, attackers unauthorizedly changed passwords on 196 accounts, which Capcom has since reset.

New details indicate a secondary impact involving 19 accounts in Japan, where attackers gained unauthorized access to the e-Capcom online store. This specific subset of the breach exposed names, addresses, phone numbers, and purchase histories.

Capcom stated that original user passwords and credit card or banking information were not compromised, and online services remain operational. The company has reported the incident to the Osaka Prefectural Police and Japan’s Personal Information Protection Commission, while warning users to remain vigilant against potential phishing attempts.

Entities

CAPCOM ID · Personal Information Protection Commission · Osaka Prefectural Police · Capcom · e-Capcom

Claims

What the coverage asserts, and how many sources carry each claim.

Timeline

  1. [TECHNOLOGY] 26 sources
    Capcom suffers data breach affecting 11.7 million accounts

    Capcom confirmed a massive data breach affecting 11.7 million CAPCOM ID accounts, exposing email addresses, IP data, and personal details for some users. Credit card info remains secure.

  2. [TECHNOLOGY] 51 sources
    Capcom confirms data breach affecting 11.7 million Capcom ID accounts

    Capcom confirmed a data breach affecting over 11.7 million Capcom ID accounts, exposing emails and login metadata. No credit card data was compromised, but users are warned of potential phishing risks.

Sources

90minutos.co · appbank.net · arynews.tv · austriagaming.at · battlefield-france.com · blogspan.net · cyberinsider.com · cybernoz.com · cybersecurity-jp.com · diarioestrategia.cl · es.digitaltrends.com · europesays.com · everyeye.it · forux.it · fr.ign.com · gamebrain.be · gamechannel.hu · gamer.no · gamereactor.cn · gamereactor.eu · gamereactor.pl · gamesindustry.biz · gamingbible.com · gamingbolt.com · gamingnation.nl · gosugamers.net · gundelik.az · haberaktuel.com · hardzone.es · hu.ign.com · ilsoftware.it · internet.watch.impress.co.jp · iphonemod.net · it-connect.fr · ithome.com · jisin.jp · jpgames.de · kitguru.net · latam.ign.com · losangelesweeklytimes.com · lowyat.net · m.takvim.com.tr · malatyaguncel.com · malwarebytes.org · manisadenge.com · medcom.id · multiplayer.it · news9live.com

This summary has been updated 3 times: see revision history