581/69 Monday, October 26, 2026
Capcom, a major Japanese video game developer and publisher, has disclosed a data breach involving its CAPCOM ID service, the company’s account system used to access games and online services, after detecting unauthorized access on October 19, 2026. According to the investigation as of October 22, attackers were able to obtain 11,774,247 email addresses and associated internal account identifiers worldwide. The affected data also included account creation dates, most recent login dates, login counts, and IP addresses used during the latest login, raising the risk that the exposed information could be used in further attacks or fraudulent activity targeting users.
Capcom also stated that additional personal information belonging to 43 users was exposed, including dates of birth, gender, country, and nicknames. The company also identified unauthorized password changes affecting 196 user accounts and has since reset the passwords for those accounts. After detecting the incident, Capcom implemented emergency measures to contain the impact and began investigating the attack method and root cause. The company confirmed that services relying on CAPCOM ID remain operational.
Capcom said it has established a dedicated response team to collect information, assess the scope of the incident, and develop measures to prevent similar events from recurring. The company has also reported the incident to relevant authorities and an external security oversight committee and has begun contacting affected users through dedicated support channels. Capcom warned users to remain alert for phishing emails impersonating the company or its partners, particularly messages containing suspicious links or attachments, as the exposed account information could be used to create more convincing social engineering attempts. The company stated that it will continue its investigation and strengthen the security of its systems to reduce the risk of future incidents.