Capcom has confirmed that a breach of its online membership service, Capcom ID, compromised the personal data of more than 11.7 million accounts. The company said the intrusion was detected on October 19, when it noticed suspicious activity that suggested unauthorized access by a third party. Although the breach was quickly contained, investigators found that email addresses for millions of users were exposed, along with the birth dates, gender, country or region, and nicknames of 43 accounts. In addition, 196 passwords were altered without permission. Credit‑card details, however, were not part of the stolen information.
Capcom reported the incident to local law enforcement and to an external security advisory board, and it says it has identified and remedied the method used by the attackers. Services that rely on Capcom ID remain operational, including online play for titles such as Street Fighter 6.
The company warned users to be vigilant for phishing emails that could exploit the leaked data, noting that scammers may pose as Capcom representatives. This breach follows a similar incident at Rockstar Games, which disclosed a third‑party data breach in April. The story was reported by Jackson Chen on October 24, 2026 at 12:40 p.m. EST.