Capcom confirms 11.7 million CAPCOM ID accounts were accessed
From the HARD Situation Room · First reported
For everything else happening in security now, see the Situation Room.
The Resident Evil and Street Fighter maker says email addresses, sign-up dates, login counts and last-login IP addresses were exposed. Capcom has not confirmed exposure of customers' original passwords. Attackers changed 196 account passwords, which Capcom reset. Card details were not affected. For 43 accounts, birth dates, gender, country and nicknames were also taken.
Timeline
-
HARD publishes its alert, at Watch.
What to do
- If anyone in the family has a CAPCOM ID, expect convincing fake Capcom or gaming emails and treat links in them as untrusted.
- If that password is used anywhere else, change it there.
Related
Situations
- Binance robbed of US$6.3 billion in 20 minutes, the biggest crypto theft on record Data breach, high, 31 Oct 2026
- Scribd breached: account details, and for some card details, of Scribd, Everand, SlideShare and Fable users Data breach, watch, 31 Oct 2026
- Northflank, a platform-as-a-service, is the ninth developer platform this month to lose the keys customers stored with it Data breach, high, 22 Oct 2026
- Signal calls could stay open after you hung up, fixed in Android 8.27, iOS 8.30 and Desktop 8.30 Software flaw, high, 24 Oct 2026
- Every situation, in the Situation Room
References
- Capcom (). “不正アクセスによるお客様情報漏えいのお詫びとお知らせ (notice of a customer data leak through unauthorised access)”.
- BleepingComputer (). “Capcom confirms data breach affecting 11.7 million accounts”.
Situation Room articles are updated as events develop: updates are added to the timeline, and never edited away. Follow them by email or RSS.