---
title: 'Capcom ID breach exposes 11,774,247 accounts worldwide'
url: 'https://securteksecurity.com/news/capcom-id-breach-11774247-accounts'
markdown: 'https://securteksecurity.com/news/capcom-id-breach-11774247-accounts.md'
date: '2026-10-22'
description: 'Capcom announced on October 22, 2026 that a third party accessed its CAPCOM ID unified membership service, exposing email addresses and system identifiers for all 11,774,247 accounts worldwide. The system identifiers cover account creation and last login times, login counts, and the IP address used…'
taxonomy:
  category:
    - Breaches
  tag:
    - japan
    - gaming
---

# [Capcom ID breach exposes 11,774,247 accounts worldwide](https://securteksecurity.com/news/capcom-id-breach-11774247-accounts)

   22nd Oct 2026   [japan](https://securteksecurity.com/tag:japan#body-wrapper) [gaming](https://securteksecurity.com/tag:gaming#body-wrapper)  

Capcom announced on October 22, 2026 that a third party accessed its CAPCOM ID unified membership service, exposing email addresses and system identifiers for all 11,774,247 accounts worldwide. The system identifiers cover account creation and last login times, login counts, and the IP address used at the last login. For 43 accounts, dates of birth, gender, country or region, and nicknames were also exposed. The attacker changed passwords on 196 accounts, which Capcom has reset. Capcom says no user set passwords were leaked and no credit card data was involved.

Capcom found suspicious traces of unauthorized access on October 19 and blocked access the same day, set up an internal task force on October 20, and reported the incident to Osaka Prefectural Police and Japan's Personal Information Protection Commission on October 21. Services using CAPCOM ID remain available and gameplay is unaffected. Capcom warned that the exposed addresses could be used in phishing emails impersonating Capcom or related organisations, and urged users not to open links or attachments in suspicious messages.

Update, October 23: Capcom's follow up disclosure on October 23, 2026 says attackers used 19 of the 196 accounts whose passwords were changed without authorization to access customer pages on e-Capcom, its online store in Japan. Through those 19 accounts, all in Japan, the attackers could view names including phonetic names, telephone numbers, postal addresses, gender, dates of birth, purchase histories, customer inquiry histories, and saved address book details. No credit card data was involved, Capcom says it found no further information exposure through the other hijacked accounts, and it says its assessment of the incident's scope is complete. The 19 accounts are a subset of the 196 and of the 11,774,247 accounts already counted above, so the records total is unchanged.

Sources: [Inven Global](https://www.invenglobal.com/articles/27564/capcom-cyberattack-exposes-1177-million-capcom-id-records-including-emails); [Notebookcheck](https://www.notebookcheck.net/Capcom-confirms-major-data-breach-affecting-more-than-11-7-million-Capcom-ID-accounts-worldwide.1431069.0.html); [eSecurity Planet](https://www.esecurityplanet.com/threats/news-capcom-data-breach-11-million-records/); [Japan Cyber Watch](https://japancyberwatch.com/articles/capcom-id-breach-11-million-accounts-2026)

---

## Navigation

- Parent: [News](https://securteksecurity.com/news.md)
- Previous: [California student data breach via ETS exposes records for three school years](https://securteksecurity.com/news/california-student-data-breach-ets-sftp-three-school-years.md)
- Next: [CenterPoint Energy breach affects 1,062,060 Texans, state disclosure shows](https://securteksecurity.com/news/centerpoint-energy-data-breach-1062060-texans.md)