[REVISION HISTORY]

Capcom data breach

Updated 3 times since CLSTR started tracking revisions of this situation.

What changed

2026-10-26 06:22 UTC → 2026-10-26 20:33 UTC · added ~~removed~~

Japanese video game publisher Capcom confirmed a major data breach affecting approximately 11.7 million Capcom ID records worldwide. The unauthorized access to the company’s unified online membership service was first detected on October 19, 2026. The breach primarily exposed email addresses and system metadata, such as account creation dates, login timestamps, and IP addresses. A smaller subset of records—specifically 43 accounts—included personal details like dates of birth, gender, country or region, and nicknames. Additionally, attackers unauthorizedly changed passwords on 196 accounts, which Capcom has since reset. New details indicate a secondary impact involving 19 accounts in Japan, where attackers gained unauthorized access to the e-Capcom online store. This specific subset of the breach exposed names, addresses, phone numbers, and purchase histories. Capcom stated that original user passwords and credit card or banking information were not compromised, and online services remain operational. The company has reported the incident to the Osaka Prefectural Police and Japan’s Personal Information Protection Commission, while warning users to remain vigilant against potential phishing attempts.

Versions

Only revisions since CLSTR began indexing content versions appear here. Select a version to see what changed compared to the one before it.