# Capcom data breach

> Live situation record from CLSTR: https://clstr.news/situations/capcom-data-breach
> Updated: 2026-10-25T01:45:00.000Z. Sources: 76. Developments: 2.

Japanese video game publisher Capcom confirmed a major data breach affecting approximately 11.7 million Capcom ID records worldwide. The unauthorized access to the company’s unified online membership service was first detected on October 19, 2026.

The breach primarily exposed email addresses and system metadata, such as account creation dates, login timestamps, and IP addresses. A smaller subset of records—specifically 43 accounts—included personal details like dates of birth, gender, country or region, and nicknames. Additionally, attackers unauthorizedly changed passwords on 196 accounts, which Capcom has since reset.

New details indicate a secondary impact involving 19 accounts in Japan, where attackers gained unauthorized access to the e-Capcom online store. This specific subset of the breach exposed names, addresses, phone numbers, and purchase histories.

Capcom stated that original user passwords and credit card or banking information were not compromised, and online services remain operational. The company has reported the incident to the Osaka Prefectural Police and Japan’s Personal Information Protection Commission, while warning users to remain vigilant against potential phishing attempts.

## Claims

- Capcom identified unauthorized access to its CAPCOM ID service on October 19, 2026. (corroborated by 23 sources)
- A total of 11,774,247 customer records were leaked worldwide. (corroborated by 23 sources)
- Leaked data includes email addresses, account creation dates, last login dates, and IP addresses. (corroborated by 23 sources)
- Attackers unauthorizedly changed the passwords of 196 accounts. (corroborated by 23 sources)
- Credit card information was not compromised in the breach. (corroborated by 23 sources)
- Personal information from 43 accounts, including birth dates and gender, was exposed. (corroborated by 23 sources)
- The incident was reported to the Osaka Prefectural Police and Japan's Personal Information Protection Commission. (corroborated by 8 sources)

## Timeline

### 2026-10-25: Capcom suffers data breach affecting 11.7 million accounts

Capcom confirmed a massive data breach affecting 11.7 million CAPCOM ID accounts, exposing email addresses, IP data, and personal details for some users. Credit card info remains secure.

26 sources. https://clstr.news/cluster/capcom-confirms-data-breach-affecting-117-million-capcom-id-records

### 2026-10-22: Capcom confirms data breach affecting 11.7 million Capcom ID accounts

Capcom confirmed a data breach affecting over 11.7 million Capcom ID accounts, exposing emails and login metadata. No credit card data was compromised, but users are warned of potential phishing risks.

51 sources. https://clstr.news/cluster/fuji-television-reports-unauthorized-access-to-program-promotion-system

---
Cite as: Capcom data breach. CLSTR, https://clstr.news/situations/capcom-data-breach