Japanese video game developer Capcom has confirmed a data breach involving its CAPCOM ID membership service, exposing more than 11.7 million customer email addresses and associated account information.
The exposed data includes account creation dates, last login timestamps, login counts, and IP addresses used during the most recent logins. For a smaller group of 43 accounts, the compromised information also included dates of birth, gender, nicknames, and countries.
Capcom also identified 196 accounts whose login passwords had been changed by the attackers in an apparent attempt to lock legitimate users out. The company said it took action to reset the affected passwords.
In an official announcement, Capcom said passwords belonging to other registered members were not exposed. Credit card information was also unaffected by the incident.
Capcom is known for popular video game franchises such as Resident Evil, Monster Hunter, Street Fighter, and Mega Man. The company operates CAPCOM ID as a shared account system that allows users to access its online services and selected games.
The company said it detected suspicious activity and confirmed unauthorized access on October 19. An investigation began immediately, and by the following day, Capcom had determined that customer information had been compromised. On October 21, the company reported the incident to law enforcement and Japan’s Personal Information Protection Commission.
Although Capcom said its online services remain operational, it warned users to be cautious of unsolicited emails, unexpected messages requesting additional personal information, and communications containing suspicious links or attachments. The exposed email addresses and account details could potentially be used in targeted phishing campaigns.
During its investigation, Capcom identified how the intrusion occurred and implemented security measures intended to prevent similar incidents. However, the company has not disclosed technical details about the initial access method.
If this article helped you, please consider supporting our work. Every small contribution keeps Abijita.com independent and running.
Capcom plans to notify affected customers in stages, potentially reflecting the large number of accounts involved. It has also established region-specific communication channels for users seeking assistance.
Capcom Confirms Data Breach Affecting 11.7 Million Email Addresses
