Capcom Confirms Data Breach Affecting 11.7 Million Accounts

Capcom confirmed that a third party accessed its CAPCOM ID service and obtained information linked to 11,774,247 user email addresses. The company said the breach triggered its security protocols and that the service has been secured. CAPCOM ID remains available, with no impact on gameplay reported.

The exposed information also included account creation and last login dates and times, login counts, and the client IP address used at the last login. For 43 users, the attackers also obtained dates of birth, gender, nicknames, and country and region data. They changed the passwords of 196 users in an apparent attempt to lock them out. Capcom said the passwords themselves were not leaked, the accounts were restored, and it began a password reset process. The company said credit card information was not included in the leak target and that it would contact eligible customers individually.

Capcom did not identify the attackers or explain how they gained access. The company said it notified police and other relevant authorities, and that its investigation continues. No group had claimed responsibility or shared samples or the full database at the time of the report. Capcom also said the breach did not affect gameplay.