Capcom
HighReportedDigital services
Capcom detected suspicious activity and confirmed unauthorized access to its CAPCOM ID account service on 19 October 2026. More than 11.7 million email addresses are affected, along with account creation date, last login date, number of logins and the IP address of the last login. For 43 accounts, date of birth, gender, nickname and country were also exposed. On 196 accounts, the passwords were changed by the attackers and then reset by Capcom; the company states that all other passwords and payment card data were not affected, and that affected users will be notified in stages.
The exposed email addresses allow a malicious third party to send targeted phishing messages impersonating Capcom.
- Disclosed on
- October 22, 2026
- Accounts affected
- 12M
- Sector
- Digital services
- Country
- Japan
- Cause
- Undisclosed
Exposed data
- Email address
- Connection data (IP, logs)
- Date of birth
- Other personal data
You are only affected if you had an account or an order with this organisation.
What you can do
- Expect phishing attempts quoting your name and this company. A message that knows your details is not legitimate for that reason.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.
Sources
Entry built from the cited sources after a corroboration check, then reviewed before publication. Spotted an error, or have a correction? Write to us and the entry will be fixed. Contact