A data breach at Japanese video game publisher Capcom has exposed 11,774,247 user accounts worldwide. The incident compromises millions of email addresses and associated system data linked to the company’s CAPCOM ID membership service.
The publisher’s previous security incident in November 2020 compromised the personal data of up to 350,000 customers, business partners, and employees. For the current incident, attackers accessed account creation dates, last login timestamps, login counts, and the IP addresses used for the most recent sign-ins.
Unauthorized Password Changes Target 196 Accounts
Payment card information was unaffected during the intrusion, and customer email addresses remain active for ongoing game services.
For a narrow subset of 43 accounts, the exposed data included additional personal details such as dates of birth, gender, countries or regions, and nicknames. Capcom detected suspicious activity on October 19 and confirmed the unauthorized access on the exact same day.
Capcom Reports Breach to Police and Regulators
Following the detection on October 19, Capcom established an internal incident response headquarters the next day on October 20. The publisher informed the Information Technology Security Oversight Committee, an external advisory body, and officially reported the breach to the Osaka Prefectural Police and Japan’s Personal Information Protection Commission on October 21.
The company completed its emergency response phase and identified the method of attack, though it has not publicly disclosed the technical vector used by the intruders. CAPCOM ID services and online video games remain operational while the investigation continues.
Phishing Warnings Issued for Affected Players
Capcom advised users to watch out for fraudulent messages and phishing emails posing as the company or related entities. The publisher asked players to refrain from opening attachments or clicking URLs contained in suspicious communications.
The company plans to notify affected customers in stages. Dedicated regional support channels, including a toll-free telephone line in Japan and online inquiry forms for the Americas and EMEA regions, are now active.
Frequently Asked Questions About the Capcom Breach
What games and services use the CAPCOM ID system?
CAPCOM ID serves as the shared account system required to sign in to Capcom web services and play specific multiplayer games online, including titles across franchises like Resident Evil, Street Fighter, Monster Hunter, and Mega Man.
Were credit card numbers or financial details stolen?
No payment card information was included in the breached records, according to Capcom’s incident disclosures.
How can affected users contact Capcom for support?
Players can reach out through region-specific online inquiry forms for the Americas, Europe, the Middle East, and Africa, or utilize a dedicated toll-free support telephone line established in Japan.