Cybersecurity

Capcom Discloses Data Breach Impacting Millions of Users

Japanese gaming giant Capcom has revealed a major data breach affecting millions of accounts after discovering unauthorized access to its shared service platform.

Radwan AbdulhadiEditor and technology writer

Published: October 23, 2026 · Updated: October 23, 2026 · 3 min read

Capcom Discloses Data Breach Impacting Millions of Users — Image: SecurityWeek

Unauthorized Access Discovered on CAPCOM ID

Japanese gaming company Capcom has disclosed a significant data breach impacting millions of email addresses and the personal information of a small group of individuals. According to details shared in an official [incident notice](https://www.capcom.co.jp/ir/news/html/261022.html), the incident was discovered on October 19 and involved unauthorized access to the CAPCOM ID shared service, which is utilized for accessing online services and playing online games.

Scope of the Stolen Data and Compromised Information

During the security intrusion, the attackers stole the email addresses of 11,774,247 people. Along with these email addresses, the hackers accessed core account data such as account creation dates, last login dates, total number of logins, and the IP address from the last login session. For a subset of 43 affected customers, the intrusion went further, compromising additional personal details including dates of birth, gender information, country or region details, and user nicknames.

Password Alterations and Immediate Response Measures

In addition to harvesting email addresses and account metrics, Capcom determined that the attackers changed the CAPCOM ID account passwords for 196 of the affected users. The company noted that no user passwords were compromised overall and clarified that it has already successfully reset the passwords for all impacted accounts. Capcom confirmed that it has fully implemented necessary incident response measures, ensuring that all services utilizing CAPCOM ID remain fully operational and available to players.

Customer Support and Official Security Warnings

As reported by [SecurityWeek](https://www.securityweek.com/11-million-impacted-by-capcom-data-breach/), Capcom has begun contacting target customers sequentially and has established a dedicated contact point to handle customer inquiries regarding the breach. The gaming corporation has also reported the security incident to the relevant regulatory and legal authorities while continuing its internal investigation.

Furthermore, Capcom has issued warnings to affected users, advising them to remain highly vigilant against unsolicited email messages that impersonate the company or its corporate affiliates. Users are specifically cautioned to watch out for incoming communications containing suspicious URLs or unexpected file attachments.

Future Prevention and Information Security Goals

Reflecting on the scale of the breach, the company emphasized that it takes the security situation very seriously. Capcom stated that it will continue conducting detailed surveys, implement targeted measures to prevent future recurrences based on the root causes identified during the investigation, and continuously work to strengthen its broader information security infrastructure.