Capcom Acknowledges Security Breach Impacting 11.7 Million Accounts

Capcom ID remains operational, though users may encounter an uptick in phishing emails.
Users of Capcom ID are advised to remain vigilant for phishing emails following the confirmation of a significant data breach that has affected over 11.7 million accounts. Earlier this week, the gaming company reported that its online membership system experienced “unauthorized access by a third party.”
In its announcement, Capcom revealed that the breach compromised millions of email addresses along with sensitive details such as birth dates, gender, country or region, and nicknames belonging to 43 accounts. Furthermore, 196 passwords were altered without authorization. Notably, customer credit card data was not part of this breach.
The company indicated that it first noticed irregular activity suggestive of possible unauthorized access to Capcom ID on October 19. Prompt action was taken to disable access and initiate an investigation into the incident. Capcom also reported the breach to local law enforcement and engaged its external security advisory team for further oversight.
Capcom stated that it has “identified and addressed the attack method used,” ensuring that all services dependent on Capcom ID, including online games such as Street Fighter 6, remain operational. However, the company cautioned users to be cautious of any suspicious emails, as the compromised information could be exploited to send fraudulent messages mimicking Capcom. Capcom is not alone in facing such issues; Rockstar Games also confirmed in April that it experienced a similar “third-party data breach.”



