Capcom Confirms Data Breach Affecting 11.7 Million CAPCOM ID Accounts
Customer email addresses and associated information exposed in service compromise
Key Takeaways
- Capcom confirmed a data breach affecting its CAPCOM ID membership service.
- More than 11.7 million customer email addresses and associated information were exposed.
- The attack vector and full scope of compromised data have not been disclosed.
- No specific exploitation of the breached data has been reported publicly.
- Affected users are at increased risk of phishing and credential stuffing attacks.
Quick answers
- What happened?
- Japanese gaming company Capcom has confirmed a data breach impacting its CAPCOM ID membership service, resulting in the exposure of more than 11.7 million customer email addresses and associated information. The incident was reported by BleepingComputer on October 22, 2026.
- Which products are affected?
- CAPCOM ID
- What should defenders do?
- Affected users should remain vigilant for phishing attempts, avoid password reuse, and monitor accounts for suspicious activity. Capcom is expected to provide further guidance on remediation.
Capcom, the Japanese video game developer and publisher, has officially confirmed that its CAPCOM ID membership service was breached by unauthorized actors. According to the company and reporting from BleepingComputer, the incident exposed more than 11.7 million customer email addresses and associated information. The breach affects the CAPCOM ID service, which is used for account management across Capcom's portfolio of games and services. At this time, Capcom has not disclosed the specific attack vector used to gain access to the system, nor the full scope of additional data types compromised beyond email addresses. The company has stated that incident response and remediation efforts are underway. No specific exploitation of the exposed data has been reported publicly, but the exposure of email addresses and associated information may increase the risk of phishing and credential stuffing attacks targeting affected users. The incident was first reported on October 22, 2026.
Security Details
Breach confirmed in CAPCOM ID membership service; 11.7 million email addresses and associated information exposed. Attack vector not yet disclosed.
Affected products
CAPCOM ID
Mitigation
Affected users should remain vigilant for phishing attempts, avoid password reuse, and monitor accounts for suspicious activity. Capcom is expected to provide further guidance on remediation.
Sources
BleepingComputer
Capcom confirms data breach affecting 11.7 million accounts
Oct 22, 2026 · 20:22
Original link
Related Security News
Zeabur Platform Shutting Down Following Second Security Breach in Two Months
Zeabur, a development platform, has confirmed a cybersecurity incident in which an attacker used leaked internal credentials stored in plaintext to compromise infrastructure. Over 3.2 million environment variable records and data for 321,810 accounts were stolen. The company has announced it is shutting down following the breach.
Nikkei Discloses Third Data Breach in a Month, 1.83 Million Records Exposed
Nikkei Inc. has disclosed a third data breach within approximately one month, exposing 1.83 million personal information records. The incident follows two prior breaches disclosed in the same period, suggesting a pattern of recurring security failures at the Japanese media conglomerate.
