Capcom confirms a data breach has affected over 11 million people, with emails, IP addresses, and birthdays caught up in the mix

If you have a Capcom ID, you may want to check your email to see if you are one of the 11,774,247 caught in the latest Capcom data breach.

Capcom has issued a public apology (via Notebook Check), declaring that "unauthorised access by a third party occurred to our online membership service 'CAPCOM ID', resulting in the leakage of some customer information. "

The 11 million figure is the number of email addresses with system-specific identification information (like account creation time, last login, and client IP address on last login) that were leaked. 43 accounts had additional information exposed, including the date of birth, gender, country/region, and nickname on the account.

196 Capcom accounts have also had their login passwords illegally changed, though the company says "No leaks of passwords set by the customers themselves have been confirmed". It also says, "The passwords for these accounts have already been reset, and we are continuing to investigate the extent of the impact of the unauthorized access."

Capcom states that no credit card information was included in this breach, and it has reportedly "completed the implementation of emergency measures and the identification and response to the attack methods".

Capcom claims it originally caught the breach on October 19, 2026, and blocked access as soon as it was discovered. On October 20, a task force was created to gather information and prevent any further damage. On October 21, the breach was reported to the police and the Personal Information Protection Commission.

From here, those affected should receive an email from Capcom declaring that their data was in the breach, and the company urges users to be extra vigilant in watching their emails. Capcom suspects that those caught up in the breach might receive suspicious emails impersonating Capcom or similar companies, attempting to get access to their accounts or phish them.

Though hackers did not gain access to customer-made passwords in this breach, it's probably a good reminder to set up different passwords for different accounts, and also a good reminder to use a password manager, too.