Capcom Confirms Massive Data Breach Affecting 11.7 Million Users

Capcom has confirmed a significant data breach involving its Capcom ID online membership service, affecting more than 11.7 million users. According to reporting from Engadget, the company detected suspicious activity on October 19, indicating that a third party had gained unauthorized access to the system.

While Capcom stated that customer credit card information was not compromised, the breach included millions of account emails. Engadget reports that the leak also involved the nicknames, gender, birth dates, and countries or regions of 43 accounts, and that 196 account passwords were changed without authorization.

Capcom has since reported the incident to its external security oversight advisory board and local police. The company stated it has identified and addressed the specific attack method used. While services requiring Capcom ID—including titles such as Street Fighter 6—remain available for use, the company warned users to be vigilant against phishing scam emails that may impersonate the publisher using the stolen data.

This incident follows a pattern of security lapses among major gaming firms; Engadget notes that Rockstar Games also confirmed a third-party data breach in April.