● Covered by 3 sources · 3 reportsMedium impact1 negative2 neutral
Capcom confirms data breach affecting 11.7 million CAPCOM ID accounts
Key points
- 11.7 million CAPCOM ID accounts had email addresses exposed.
- Account creation date, login timestamps, and IP addresses were also exposed.
- A small subset of accounts had passwords changed or additional personal data exposed.
- Capcom detected unauthorized access on October 19 and reported it on October 21.
- 43 accounts had birth dates, gender, country/region, and nicknames compromised.
- Capcom reset passwords for 196 affected users.
- Capcom is notifying affected customers sequentially.
- Capcom ID service remains available for use.
- Capcom reported the incident to local police and its external advisory board.
Breach Details and Affected Data
Japanese gaming company Capcom confirmed a data breach impacting its CAPCOM ID membership service. The breach exposed email addresses and associated information for more than 11.7 million customer accounts. Other exposed data includes account creation date, last login timestamp, number of logins, and the IP address used at the last login.
For a small subset of 43 accounts, dates of birth, gender, nicknames, and countries were also exposed. Additionally, for 196 accounts, hackers attempted to change login passwords, which Capcom subsequently reset. The company stated that passwords for other registered members and credit card information remained unaffected.
Timeline and Response
Capcom detected suspicious activity and confirmed unauthorized access on October 19. An investigation was launched immediately, and by October 20, it was clear customer information had been compromised. The incident was reported to the police and Japan’s Personal Information Protection Commission on October 21.
Capcom has implemented security measures to prevent similar incidents, though details on the initial intrusion method were not shared. The company will notify affected customers in stages and has established region-specific support channels. Online services remain unaffected, but users are advised to be vigilant against unsolicited communications.
Prior Security Incidents
This is not Capcom's first security incident. In November 2020, the company suffered an attack by the Ragnar Locker ransomware gang, which claimed to have stolen 1 TB of data. Capcom later disclosed in April 2021 that the attackers gained access through an old VPN device, affecting up to 390,000 people.
Updates
- Capcom ID service remains available for use.
- Capcom reported the incident to local police and its external advisory board.
- 43 accounts had birth dates, gender, country/region, and nicknames compromised.
- Capcom reset passwords for 196 affected users.
- Capcom is notifying affected customers sequentially.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
The daily brief
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Today's brief
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's brief
New every morning, and the back catalogue is archived by date.
How outlets covered it
Capcom confirmed a data breach impacting 11.7 million users of its Capcom ID online membership service. The breach exposed account emails, and for a smaller number of accounts, birth dates, gender, country, and nicknames, leading to a warning about increased phishing attempts.
Capcom announced a data breach impacting 11 million email addresses and limited personal information from its CAPCOM ID service. The incident, discovered on October 19, involved unauthorized access that also compromised account data and, for a small number of users, additional personal details and password changes. Capcom has reset affected passwords and is notifying users.
Capcom announced a data breach of its CAPCOM ID membership service, exposing email addresses and associated information for over 11.7 million accounts. This incident follows a 2020 ransomware attack and highlights ongoing security challenges for the gaming company.