2026-10-23
Capcom CAPCOM ID Breach (11,774,247 Records): Email Addresses and Login Data Leaked — What Account Holders Should Do
On October 22, 2026, Capcom Co., Ltd. announced that its online membership service CAPCOM ID (the shared account used for Capcom web services and some online games) was accessed without authorization by a third party, and that part of its customer information leaked. The leaked data are email addresses and system-specific identifier information (account creation date and time, last login date and time, number of logins, and the client IP address used at the last login), in 11,774,247 records worldwide. For 43 of them, date of birth, gender, country/region and nickname also leaked. On 196 of the accounts, the login password had been changed without authorization; the company has already reset those passwords. The company says it has not confirmed any leak of passwords set by customers themselves, and credit card information was not among the affected data. According to the company, it found traces suggesting unauthorized access on October 19, immediately began blocking the access and investigating the cause and scope, and confirmed the unauthorized access the same day; on October 20 it confirmed the leak and the password changes; and on October 21 it reported the incident to the police and Japan's Personal Information Protection Commission. It says it has identified and addressed the attack method, but has not disclosed details of the cause. Services using CAPCOM ID and all games remain available. It said it would contact affected customers individually and set up dedicated support channels for each region. This site's take: CAPCOM ID holders should not open links in emails claiming to be Capcom, should change any password they reuse elsewhere, and should turn on two-factor authentication.