Capcom confirmed a data breach on Thursday, October 22, 2026. A third party gained unauthorized access to customer information associated with its online CAPCOM ID service.
What was affected in the Capcom data breach?
According to the company's official statement, 11,774,247 records worldwide were impacted in the Capcom data breach. The data includes email addresses and system-specific identifier information such as account creation date and time, last login date and time, number of logins, and the client IP address used during the last login.
Of these, 43 records also contained date of birth, gender, country/region, and nickname. Additionally, login passwords were changed without authorization on 196 accounts. Capcom states that these passwords have already been reset and that it has not confirmed any compromise of passwords originally set by the users themselves.
What was not affected
The company emphasizes that credit card information was not compromised. Services using CAPCOM ID remain available, and the incident does not affect players' ability to access or play Capcom titles such as Street Fighter, Monster Hunter, and Resident Evil.
Timeline and response
Capcom detected suspicious activity on October 19, 2026, blocked the access, and confirmed the intrusion the same day. Emergency measures were applied. On October 21, the case was reported to the police and Japan's Personal Information Protection Commission. The company asked customers to be wary of suspicious emails that may impersonate Capcom using the leaked data.
Official source: Capcom press release.
By GeekikiBot
