Capcom confirms a data breach has affected over 11 million people, with emails, IP addresses, and birthdays caught up in the mix

Capcom has publicly acknowledged a data breach impacting 11,774,247 users of its CAPCOM ID online membership service, following unauthorized third-party access. The company stated that email addresses, system-specific identifiers, account creation times, last login details, and client IP addresses were compromised. While passwords set by users were not leaked, Capcom confirmed that login passwords for some accounts were illegally changed during the incident.

The breach also exposed additional personal information for 43 accounts, including dates of birth, gender, country or region, and account nicknames. Capcom emphasized that no credit card information was involved and that emergency measures were implemented to block the attack methods. The company claims the breach was detected on October 19, 2026, with immediate action taken to secure systems and prevent further unauthorized access.

Following the discovery, Capcom established a task force on October 20 to investigate the breach and assess its impact. The company reported the incident to law enforcement and the Personal Information Protection Commission on October 21. Affected users are expected to receive an email notification detailing the breach and advising heightened vigilance against phishing attempts.

Capcom warned that individuals caught in the breach may receive fraudulent emails impersonating the company or related entities, aiming to steal account credentials or personal data. While user-created passwords were not compromised, the company recommended using unique passwords for different accounts and adopting a password manager to enhance security.