11.7M RECORDS EXPOSED Japanese game publisher Capcom (Resident Evil, Monster ...

X • October 23, 2026

Japanese game publisher Capcom (Resident Evil, Monster Hunter, Street Fighter) said on Oct 22, 2026 that a third party gained unauthorized access to customer data tied to CAPCOM ID, its shared online account service.

• 11,774,247 records worldwide: email addresses plus account creation date, last login time, login count and last-login IP

• 43 of those records also included date of birth, gender, country/region and nickname

• Attackers changed the passwords of 196 accounts; Capcom has reset them

• No evidence that customer-set passwords leaked; no credit card data involved

• Suspicious activity detected Oct 19; reported to Osaka police and Japan's PPC on Oct 21

Millions of verified gamer emails with login metadata are prime fuel for Capcom-themed phishing and credential stuffing. CAPCOM ID users should distrust "account security" emails, enable MFA where offered, and not reuse that password elsewhere.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Capcom Data Breach Exposes 11.7 Million Accounts Capcom has reported a data breach affecting 11,774,247 CAPCOM ID accounts, with unauthorized access detected on October 19, 2026. The breach exposed email addresses and account activity information, including account creation dates, last login timestamps, and IP addresses. Additionally, personal information such as dates of birth, gender, country/region, and nicknames were compromised for 43 accounts. The attackers changed passwords on 196 accounts, which Capcom has since reset. No evidence suggests that user-set passwords or credit card information were leaked. Capcom has established an internal task force to investigate the incident and has reported it to law enforcement. Users are advised to be cautious of phishing attempts using the exposed email addresses. The investigation is ongoing, and Capcom plans to notify affected customers directly. 36 sources 62

Extracted Entities

11.7M RECORDS EXPOSED Japanese game publisher Capcom (Resident Evil, Monster ...

The full story

Extracted Entities

Attack Types (1)

Companies (1)

Countries (1)

CWE Weaknesses (1)

MITRE ATT&CK (2)