Japanese gaming company Capcom has disclosed a data breach impacting 11 million email addresses and the personal information of a small number of individuals.
The incident, the gaming giant says, was discovered on October 19 and involved unauthorized access to CAPCOM ID, its shared service used for accessing online services and for playing online games.
During the intrusion, the hackers stole the email addresses of 11,774,247 people, along with account data such as creation date, last login date, number of logins, and the last login’s IP address.
For 43 of the affected customers, the hackers also compromised dates of birth, gender information, country/region details, and nicknames.
Additionally, Capcom determined that the attackers changed the CAPCOM ID account passwords for 196 of the affected users. The company says that no user passwords were compromised and that it has already reset the passwords for the affected accounts.
Capcom says it implemented incident response measures and all services using CAPCOM ID remain available.
“In addition, we have started to the target customers sequentially, and we have established a dedicated point for customers regarding this matter,” an automated translation of Capcom’s incident notice reads.
The gaming company says it has reported the data breach to the relevant authorities and continues to investigate it.
It also warns the affected users to be wary of unsolicited email messages impersonating the company or related entities and containing suspicious URLs or attachments.
“We take this matter seriously and will continue to conduct detailed surveys, take measures to prevent recurrence based on the causes identified this time, and work to further strengthen our information security system,” Capcom added.
Related: Hackers Steal 1.8 Million Records From Nikkei
Related: 970,000 Medi-Cal Members Affected by Paradigm Healthcare Data Breach
Related: PHP2Shell Exploitation Started Days Before Patches
Related: Tech and Security Companies Respond to PHP2Shell Vulnerabilities
Quest Diagnostics Reports Cyber Breach Affecting ‘Certain Patient Records’
In a regulatory filing, Quest Diagnostics reported unauthorized access to its Quanum Lab Services Manager, a platform where certain clients can place test orders.
Hackers Steal 1.8 Million Records From Nikkei
The compromised information includes names, addresses, email addresses, phone numbers, and dates of birth.
970,000 Medi-Cal Members Affected by Paradigm Healthcare Data Breach
Paradigm Healthcare Services detected an intrusion in October 2025, but it took nearly a year to start notifying affected individuals.
One Compromised Login Exposed Millions of California Students’ Records
Intruders used compromised credentials to access an ETS SFTP server, copying records of California students back to 2006.
UK Legal Aid Agency Hack Scope Widens After Forensic Review
Most of the data is related to applications, claims, and payments submitted between 2007 and 2025.
CenterPoint Energy Data Breach Impacts 1 Million Texans
Personal information such as names, addresses, Social Security numbers, and driver’s license numbers was compromised.
Meta Says Hackers Took Code, Personal Data of 1,500 in GitHub Breach
Most of the affected individuals are Meta employees in the United States and they are being offered credit monitoring services.
iRhythm Data Breach Impacts at Least 360,000 People
Hackers stole patients’ personal information, including names, addresses, email addresses, dates of birth, and phone numbers.
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
