Breaches · 1h ago
Capcom confirmed a breach of its CAPCOM ID membership service affecting more than 11.7 million accounts, BleepingComputer reports. The exposed records include member email addresses and associated information.
The reporting does not identify passwords or payment data among the exposed information, and it does not establish that attackers took over accounts. A large list of email addresses tied to a gaming membership service could support convincing account-themed phishing; the source does not report such attacks occurring.
For organizations whose employees use CAPCOM ID, the exposure could make lures to their inboxes more convincing, particularly if they use the same email address elsewhere. The breach alone does not establish that corporate credentials or systems are compromised; that depends on whether recipients are targeted and respond to follow-up lures.
4 sources covering this story
Capcom Confirms Data Breach Exposed Users’ Personal Information
Japanese video games giant Capcom confirmed unauthorized access to its online account system
Capcom data breach exposes 11.7 million account records - Help Net Security
Capcom confirms a data breach exposing 11.7 million CAPCOM ID records with email addresses and login data, warns users about phishing emails.
11 Million Impacted by Capcom Data Breach
The hackers stole 11 million email addresses from CAPCOM ID and changed the login passwords for 196 accounts.
Capcom confirms data breach affecting 11.7 million accounts
Japanese gaming giant Capcom has confirmed that hackers breached its membership service, CAPCOM ID, exposing more than 11.7 million customer email addresses and associated information.
Part of the PlainSec briefing for 2026-10-23