According to ITmedia, Capcom announced on October 22 that its CAPCOM ID membership service suffered unauthorized access that leaked 11,774,247 records worldwide, after it found traces on the 19th and blocked the source [1]. Leaked data includes email addresses, account creation and last login times, login counts and last login IP, with 43 records also including birth date, gender, country and nickname; passwords of 196 accounts were changed by the intruder and have been reset, and Capcom says user-set passwords and card data were not leaked [1][2]. CAPCOM ID users should beware of emails impersonating Capcom or related parties and avoid clicking links or opening attachments in suspicious emails [2].
Capcom's shared CAPCOM ID accounts breached, leaking about 11.77 million emails and login records worldwide; 196 passwords changed
1 min read
- Disclosed
- Oct 22, 2026
- Occurred
- Oct 19, 2026
- Published
- Nov 11, 2026
- Last updated
- Nov 11, 2026
- Scale
- 11,774,247 accounts[1]
- CVSS basis
- Our assessment
- Attack vector
- Impact
- Data type
- Actor type
- Motivation
On this page
30-second summary
What happened
Who is affected
Industries mainly affected: Media, entertainment & gaming
What to do nowOur advice
- Beware of emails impersonating Capcom or related parties; do not click links or open attachments [2].
- Watch for individual notices from Capcom .
Timeline
Technical details
Remediation
Vendor guidance
- 1Watch for impersonation emails detect[2]
Do not click links or open attachments in emails impersonating Capcom.
References
Media2
- [1]
“カプコンは10月22日、不正アクセスにより会員サービス「CAPCOM ID」の情報が全世界合計で1177万4247件漏えいしたと発表した。”
- [2]
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.