Capcom apologizes about unauthorized data breach of over 11 million Capcom ID accounts

Capcom has issued a public apology regarding the data breach of 11,774,247 Capcom ID accounts worldwide as of October 22, 2026.

For those 11,774,247 accounts, information pertaining to each account's date of creation, account usernames, email addresses, the date and time of the last login, number of logins and the client IP address that was used during the last login.

There were also leaks of user date of births, gender, country/region and nickname. Luckily, however, this leaked only pertained to 43 Capcom ID accounts.

It should be noted that Capcom was able to confirm 196 unauthorized Capcom ID account password changes. Fortunately, Capcom has already taken measures to address this and has since reset the passwords for accounts affected.

Capcom has emphasized that login passwords originally set by customers were seemingly not compromised. They'll continue to investigate the matter, but it would appear that other Capcom ID account holders will not need to change their passwords.

They've also been able to confirm that credit card information has not leaked with this data breach. Overall, the information that was leaked feels fairly harmless for most users.

Regardless, Capcom has warned users fraudulent emails or communication from someone claiming to be from Capcom. It is advised that users refrain from accessing any URLs or attachments found within such communcations.

Capcom reports that they first detected suspicious activity pertaining to potential unauthorized access on October 19, 2026. Upon doing so, they immediately began blocking access.

On October 21, they established an internal incident response headquarters to investigate the matter. That same day, they reported the activity to the Information Technology Security Oversight Committee, the company’s external advisory body.

A report was also filed to the Osaka Prefectural Police and Japan’s Personal Information Protection Commission the day on October 21. Capcom has continued to monitor the situation ever since the unauthorized breach was detected.

For most of us, this likely won't be something worth worrying , but it is advised that everyone be mindful of the emails they receive from "Capcom."