Capcom has confirmed a major data breach affecting more than 11.7 million account records, exposing customer information including email addresses and account identifiers.

The Japanese publisher discovered suspicious activity on October 19, 2026, after an unauthorized third party accessed information associated with its online membership system.

What Information Was Exposed in the Capcom Data Breach?

According to Capcom’s official statement, the security incident affected:

• 11,774,247 records: Email addresses and system-specific identifiers were accessed.
• 43 accounts: Additional personal information, including dates of birth, gender, country or region, and nicknames, was exposed.
• 196 accounts: Login passwords were changed without authorization.

Capcom emphasized that original customer passwords and credit card information were not compromised.

The company has already reset passwords for affected accounts and plans to notify impacted users.

Following the discovery, Capcom activated its emergency response procedures, blocked unauthorized access and reported the incident to Japanese authorities.

The publisher also confirmed that the vulnerability used in the attack has been addressed.

Players are advised to remain cautious of suspicious emails, phishing attempts and unknown attachments.

Capcom confirmed that the breach has not affected access to its games or online gameplay services.