Capcom data breach hits 11.7 million accounts

Capcom confirmed a data breach that exposed personal information of roughly 11.7 million users of its Capcom ID system, including email addresses. The company announced the incident.

What data was exposed

The leaked data included account creation timestamps, last login times, the number of logins, and the IP address used for the last login. For about 43 accounts, even more sensitive details were exposed, such as date of birth, gender, country or region and nickname. A separate 196 accounts had their passwords altered, but Capcom says those changes were reset. The investigation found that credit card information and passwords that users created themselves were not compromised.

Capcom said that multiplayer services for games such as Street Fighter 6 and Monster Hunter Wilds will remain unaffected, and that players can continue to use their existing email addresses. The platform supports cross‑platform multiplayer across PC, PS5, Xbox Series X/S and Nintendo Switch 2. While single‑player titles normally do not require a Capcom ID, some games that use network features—for example Dragon’s Dogma 2—may have prompted users to create an account.

The company reported the breach to Japan’s Personal Information Protection Commission and the Osaka Prefectural Police, and launched an emergency response that identified the attack method. Capcom will strengthen its security framework and has warned users that phishing emails may follow the breach. It has apologized to its customers and pledged to provide further updates through its official website and other channels, assuring transparency.

Capcom has warned users that they may receive phishing emails after the breach. The company advises users to be cautious, avoid clicking on links or opening attachments in suspicious messages, and to use the official channels for any support requests.