Skip to contentistheinternetok
All incidents

Data breach·Major

Capcom: 11.7 million CAPCOM ID accounts exposed

MitigatedAttackers already use itAffects everyone
CAPCOM ID

What it changes for you

Your Capcom email may leak; expect fake Capcom messages.

An outsider got into the account service behind Capcom's games and copied the email addresses and login details of about 11.7 million people. Capcom says no customer-chosen password and no credit card data was taken, but the emails can be used for fake messages.

Started Oct 19, 2026Updated Oct 23, 2026

What should I do?

You
If you have a CAPCOM ID, do not click links or open attachments in unexpected messages claiming to be Capcom. Services stay available.

What is affected

Timeline

  1. Mitigated · Oct 23, 2026

    Capcom adds that the e-Capcom online store pages of 19 of those 196 accounts (all in Japan) were accessed, exposing names, addresses, phone numbers, birth dates and purchase history. Its investigation of the scope is complete; monitoring continues.

    Capcom
  2. Mitigated · Oct 22, 2026

    Capcom discloses 11,774,247 records with email addresses and login details (creation date, last login, number of logins, last IP address). 43 records also hold date of birth, gender, country and nickname. Passwords were changed without authorization on 196 accounts and have been reset. No credit card data.

    Capcom
  3. Identified · Oct 19, 2026

    Capcom detects suspicious activity and confirms unauthorized access; it reports the incident to the police and Japan's data protection authority on October 21.

    Capcom

Sources