Article · Technology
Capcom confirms breach: email addresses from 11.77 million accounts in third-party hands
On 2026-10-22, Japanese game company Capcom announced that an unauthorised party had accessed 11,774,247 CAPCOM ID account records worldwide: mainly email addresses, account creation and last-login times, login counts and the IP address of the last sign-in. Passwords on 196 accounts were changed without the owners' knowledge, and on 2026-10-23 the company added that for 19 of them in Japan, name, address, phone number and purchase history were exposed. Card data, according to Capcom, was not affected. The company has not said who broke in or how.
Capcom, the publisher of Resident Evil, Monster Hunter and Street Fighter, announced three days after detecting suspicious activity that almost 11.8 million account records had ended up in someone else's hands. Below we separate what the company itself confirmed, what others report, and what nobody has said yet.