Capcom data breach confirmed: More than 11 million accounts impacted


Do you play video games like Street Fighter, Resident Evil, or Monster Hunter online? If so, you probably have a Capcom ID — and you should know that there has been a major data breach that has affected millions of accounts.
Capcom, the developer of the aforementioned titles, posted a notice on Thursday informing users of a major data breach affecting more than 11 million accounts.
“Capcom Co., Ltd. has determined that certain customer information associated with CAPCOM ID, an online membership account service operated by the company, was subject to unauthorized access by a third party,” the company said in a statement. “Capcom sincerely apologizes for the complications and concern this has caused its customers and other stakeholders.”
Data breaches are seemingly becoming a regular occurrence, which may result in some becoming desensitized to this news. However, the specific information Capcom has shared should be concerning to those with a Capcom ID, as the company has confirmed that some accounts have experienced unauthorized changes due to the breach.
According to Capcom, the company first noticed suspicious activity on Capcom IDs on Oct. 19, then began blocking access and opened an investigation. Capcom’s investigation found that approximately 11,774,247 accounts were impacted in a data breach. The account information exposed to the unauthorized party includes email address records, the date and time an account was created, the total number of logins, the date and time of the last login, and the IP address used for that last login.
Of those more than 11.7 million accounts, 43 had their date of birth, gender, country/region, and nickname affected, and 196 had unauthorized changes to their Capcom ID login password.
Capcom says it has already reset the passwords associated with those 196 accounts.
One positive piece of news is that Capcom says it has yet to find any evidence that the passwords originally set by its users were leaked in the data breach. In addition, Capcom shared that it does not appear that its games were affected in the data breach.
While Capcom continues its investigation, it is warning its users to be wary of phishing emails that weaponize data leaked in the breach.
“If you receive any suspicious email or message, please exercise caution and refrain from accessing any URLs contained therein or opening any attached files,” Capcom said in its breach notice.
Want more tech and digital culture news delivered to your inbox daily or sent straight to your device? Sign up for Mashable’s Top Stories newsletter or get Mashable push alerts today.



