Capcom confirms CAPCOM ID breach exposing 11.7 million emails
Capcom says no passwords set by customers and no credit card data were included in the leak, and affected users are being notified by email.
Capcom has confirmed that unauthorized third-party access to its CAPCOM ID online membership service resulted in leaked customer information, according to PC Gamer. The breach affected 11,774,247 email addresses.
Alongside the email addresses, the leaked data includes system-specific identification information such as account creation time, last login time and the client IP address at last login. For 43 accounts, additional data was exposed, including date of birth, gender, country or region, and account nickname.
Login passwords were illegally changed on 196 Capcom accounts, and those passwords have been reset. Capcom said no customer-set passwords and no credit card information were included in the leak.
The company said it detected the breach on October 19, 2026, and blocked access at that time. A task force was created on October 20 to gather information and prevent further damage, and the breach was reported to police and the Personal Information Protection Commission on October 21.
Capcom said it has completed emergency measures and identified the attack methods. Affected users are to be notified by email and warned about phishing emails impersonating Capcom.
Quick answers
How many email addresses were affected by the CAPCOM ID breach?
Capcom said 11,774,247 email addresses were affected.
Were passwords or credit card details leaked?
Capcom said no customer-set passwords and no credit card information were included in the leak. Login passwords were illegally changed on 196 accounts and have been reset.
When did Capcom detect the breach?
Capcom detected the unauthorized access on October 19, 2026, and blocked it at that time.