Capcom confirms data breach affecting 11.8 million email addresses

Capcom confirmed a data breach of its Capcom ID membership service discovered on October 19, 2026.

Unauthorized access exposed 11,774,247 email addresses, along with account creation times, last login times, and last login IP addresses, Capcom reported.

For 43 accounts, additional personal details were exposed, including date of birth, gender, country or region, and nickname.

Capcom detected that 196 accounts had passwords illegally changed and confirmed it has reset those passwords.

The company stated that no credit-card information was included in the breach.

Capcom formed a task force on October 20, 2026, and reported the incident to police and Japan’s Personal Information Protection Commission on October 21, 2026.

Capcom warned that attackers may use the exposed information to send phishing messages and advised users to treat unexpected account alerts cautiously and open the official service directly.

Affected users should receive an email notification from Capcom.

Capcom ID members may be targeted by phishing attempts using exposed email addresses and system information.