Capcom Data Breach: What 11.77 Million Exposed CAPCOM ID Records Really Mean

On October 19, 2026, Capcom spotted unauthorized access to CAPCOM ID, the shared account system behind its websites and online game access. Three days later it disclosed the scale: 11,774,247 records.

🔍 What was exposed Email addresses, account creation and last login times, login counts, and the IP address of the most recent login. For 43 records, date of birth, gender, country or region, and nickname too. Capcom says no credit card data was involved.

🔐 The detail that stands out Attackers also changed passwords on 196 accounts, which goes beyond reading data. Capcom has not said how, or named an attacker.

📩 Why "just emails" still matters A confirmed list of active gaming emails with login metadata is useful bait for phishing and credential stuffing. Capcom warned of fraudulent messages, but no campaign is confirmed.

✅ What to do now Use a unique CAPCOM ID password, secure your email with multi-factor authentication, and never click links in "Capcom" emails.

📖 Full timeline, what's still unknown, and SOC detection tips: https://www.xpert4cyber.com/2026/10/capcom-data-breach-11-77m-records.html