{"id":25732,"date":"2026-10-26T13:40:47","date_gmt":"2026-10-26T13:40:47","guid":{"rendered":"https:\/\/igamemag.com\/?p=25732"},"modified":"2026-10-26T13:40:50","modified_gmt":"2026-10-26T13:40:50","slug":"capcom-data-breach-capcom-id","status":"publish","type":"post","link":"https:\/\/igamemag.com\/en-gb\/capcom-data-breach-capcom-id\/","title":{"rendered":"Capcom Data Breach: 11.7 Million CAPCOM ID Accounts Hit, What Was Taken and What to Do"},"content":{"rendered":"\n

\"Ryu<\/p>

The Capcom data breach<\/strong> affected 11,774,247 CAPCOM ID records worldwide<\/strong>, the Resident Evil and Street Fighter publisher confirmed on 22 October 2026. Email addresses and login details were taken, but Capcom says credit card information was not affected and it has found no sign that customers’ own passwords were stolen.<\/p>\n

The main risk now is phishing: fake emails, texts or calls pretending to be Capcom.<\/p>\n

Capcom data breach at a glance<\/h2>\n\n
Service affected<\/strong><\/td>CAPCOM ID, Capcom’s online membership account<\/td><\/tr>\n
Records<\/strong><\/td>11,774,247 worldwide<\/td><\/tr>\n
Data taken<\/strong><\/td>Email addresses, account creation date, last login date, number of logins, last login IP address<\/td><\/tr>\n
Extra details<\/strong><\/td>Date of birth, gender, country and nickname for 43 records<\/td><\/tr>\n
Hijacked accounts<\/strong><\/td>196 passwords changed by the attacker (now reset)<\/td><\/tr>\n
Not affected<\/strong><\/td>Credit card details; no confirmed theft of customers’ own passwords<\/td><\/tr>\n
Games<\/strong><\/td>Still playable; CAPCOM ID still works<\/td><\/tr>\n<\/tbody><\/table>\n

What happened in the Capcom breach?<\/h2>\n

Capcom says it spotted suspicious activity on 19 October<\/strong>, blocked the access and confirmed that a third party had got into CAPCOM ID systems. On 20 October it set up an incident response team and confirmed that customer information had been accessed and some passwords changed. On 21 October it reported the attack to the Osaka Prefectural Police and Japan’s Personal Information Protection Commission, and it published its notice on 22 October.<\/p>\n

Capcom says it has identified and dealt with the method of attack, and that the incident “does not affect players’ ability to access or play any Capcom games”.<\/p>\n

What information was stolen?<\/h2>\n