Capcom says breach hit 11,774,247 Capcom ID accounts
Capcom says emails and identifier data were accessed, card details were not, and passwords on 196 accounts were reset.
Capcom has disclosed that a third party accessed information tied to 11,774,247 Capcom ID accounts, including email addresses and system-specific identifier information, according to rockpapershotgun.com. The publisher, which operates the account service used for online play in games such as Street Fighter 6, published the figures on October 22, 2026.
In 43 of those accounts, the accessed records also included date of birth, gender, country or region and nickname, Capcom said. Passwords were changed without authorization on 196 accounts; Capcom says those passwords have since been reset.
Capcom said credit card information was not among the affected data. It warned that the exposed email addresses could be used for phishing messages that impersonate Capcom or related parties.
Reports filed with police and regulator
The company reported the breach to Osaka Prefectural Police and to Japan's Personal Information Protection Commission. Capcom said it will carry out a detailed investigation aimed at preventing a recurrence.
Capcom says suspicious activity around the Capcom ID service was first noticed on October 19, 2026, and that it spent the following days containing the problem.
Quick answers
How many Capcom ID accounts were affected?
Capcom says information tied to 11,774,247 Capcom ID accounts was accessed by a third party.
Were credit card details stolen?
Capcom says credit card information was not among the affected data.
What should Capcom ID users watch for?
Capcom warned that exposed email addresses could be used for phishing messages impersonating Capcom or related parties.