Asl matn EN tilida, manba saytidan olindi. Manba ↗

Data Breaches

11 Million Impacted by Capcom Data Breach

The hackers stole 11 million email addresses from CAPCOM ID and changed the login passwords for 196 accounts.

By

Ionut Arghire

| October 23, 2026 (4:34 AM ET)

*

  • Flipboard
  • Reddit
  • Whatsapp
  • Whatsapp
  • Email

Japanese gaming company Capcom has disclosed a data breach impacting 11 million email addresses and the personal information of a small number of individuals.

The incident, the gaming giant says, was discovered on October 19 and involved unauthorized access to CAPCOM ID, its shared service used for accessing online services and for playing online games.

During the intrusion, the hackers stole the email addresses of 11,774,247 people, along with account data such as creation date, last login date, number of logins, and the last login’s IP address.

For 43 of the affected customers, the hackers also compromised dates of birth, gender information, country/region details, and nicknames.

Additionally, Capcom determined that the attackers changed the CAPCOM ID account passwords for 196 of the affected users. The company says that no user passwords were compromised and that it has already reset the passwords for the affected accounts.

Capcom says it implemented incident response measures and all services using CAPCOM ID remain available.

Advertisement. Scroll to continue reading.

“In addition, we have started to contact the target customers sequentially, and we have established a dedicated contact point for customers regarding this matter,” an automated translation of Capcom’s incident notice reads.

The gaming company says it has reported the data breach to the relevant authorities and continues to investigate it.

It also warns the affected users to be wary of unsolicited email messages impersonating the company or related entities and containing suspicious URLs or attachments.

“We take this matter seriously and will continue to conduct detailed surveys, take measures to prevent recurrence based on the causes identified this time, and work to further strengthen our information security system,” Capcom added.

Related:Hackers Steal 1.8 Million Records From Nikkei

Related:970,000 Medi-Cal Members Affected by Paradigm Healthcare Data Breach

Related:PHP2Shell Exploitation Started Days Before Patches

Related:Tech and Security Companies Respond to PHP2Shell Vulnerabilities

Written ByIonut Arghire

Ionut Arghire is an international correspondent for SecurityWeek.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.

Business Email*

emailsignupsource

Read our Privacy Policy for more information.

More from Ionut Arghire

  • Signal Vulnerability Lets Malicious Callers Block Hang-Ups
  • Splunk, SolarWinds Release Fresh Security Updates
  • Cisco Patches 34 Vulnerabilities Across Multiple Products
  • PHP2Shell Exploitation Started Days Before Patches
  • PHP2Shell Patches Land as First Exploitation Attempts Hit Sensors
  • Memory Bugs Account for Most of Chrome’s 353 New Security Fixes
  • Browsers Block eMudhra Intermediate CAs Over Recoverable Private Keys
  • Chinese AI Model Writes More Hackable Code When Told It’s for US Contractor

Latest News

  • Former Unit 8200 Officers Raise $34 Million for Agentic SecOps Startup Mave
  • In Other News: Tor Exit Relays Hijacked, Banks Spot Rogue AI Agents, Self-Rebuilding macOS Ransomware
  • Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge
  • China APT Uses AI Pentest Tool Artex in ConnectWise Attacks
  • Attackers Exploit Third Arista VCO Zero-Day in Four Months
  • Quest Diagnostics Data Breach Exposed ‘Certain Patient Records’
  • LiteLLM Compromised in Fresh Supply Chain Attack
  • Atlassian Patches 75 Flaws in Data Center and Server Products

Trending

Tech and Security Companies Respond to PHP2Shell Vulnerabilities

China APT Uses AI Pentest Tool Artex in ConnectWise Attacks

Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge

In Other News: Tor Exit Relays Hijacked, Banks Spot Rogue AI Agents, Self-Rebuilding macOS Ransomware

PHP2Shell Patches Land as First Exploitation Attempts Hit Sensors

PHP2Shell: Mass Exploitation Looms for Leaked Critical PHP Flaws

Quest Diagnostics Data Breach Exposed ‘Certain Patient Records’

Signal Vulnerability Lets Malicious Callers Block Hang-Ups

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Business Email*

emailsignupsource

Read our Privacy Policy for more information.

Webinar: The AI Access Risk Already in Your Google Workspace

October 19, 2026

AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access.

Register

Virtual Event: CISO Forum 2026 Summit

November 10 & 11, 2026

Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.

Register

People on the Move

Cequence Security has appointed Russ Schafer as CMO.

Mona Harrington has been named Assistant Director for Cyber Integration at DHS.

iCOUNTER has appointed Mark H. FitzPatrick as CFO.

More People On The Move

Expert Insights

*

  • Flipboard
  • Reddit
  • Whatsapp
  • Whatsapp
  • Email

The Key to AI Software Security Isn’t Speed, It’s Maturity

Where your developers sit on the AI adoption scale has a real impact on how you are addressing security risk.(Matias Madou)

Context Is King in the Fight Against Modern Cyberattacks

Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.(Etay Maor)

AI Has Changed Attack Speed, Not Security Fundamentals

As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.(Joshua Goldfarb)

Four Cyber Threats Harboring Big Plans for the Future

  • AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.(Steve Durbin)

Begin at the End: How to Enable Agentic Remediation

Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.(Nadir Izrael)