Capcom data breach exposes 11.7 million accounts

Capcom has confirmed that a third‑party attacker accessed personal data linked to 11.7 million CAPCOM ID accounts. The breach was discovered on October 19, 2026, and the company verified the intrusion the same day.

CAPCOM ID is the login used for the company’s web services and for online play of several of its games. The compromised information includes usernames, email addresses, dates of birth, and hashed passwords. No payment card details or financial information were reported as part of the leak.

The attackers gained entry through an unauthorised access point, according to the company’s statement. While the exact method was not disclosed, such breaches often involve phishing emails or credential stuffing, where stolen login data from other sites is tried on the target service. Users who receive unexpected emails that appear to come from Capcom should treat them with suspicion, as attackers may attempt to harvest additional credentials or install malware.

Capcom has urged all affected users to change their passwords immediately and to enable two‑factor authentication where available. Changing passwords on other services where the same credentials were used is also advisable, as attackers may try the stolen data elsewhere. Users can test whether their passwords have appeared in known breaches by using the free password breach checker on ComputerScams.com.

To reduce the risk of future compromise, create a unique, strong password for each online account and store it in a reputable password manager. Enable two‑factor authentication on any service that offers it, and remain vigilant for phishing emails that request personal information or direct you to login pages that look unofficial.

A practical step you can take right now is to run the free email checker on ComputerScams.com to see if any recent emails claiming to be from Capcom are flagged as suspicious.

Source: Read the original report