Capcom discloses unauthorized access to email-address records for 11,774,247 CAPCOM ID accounts

Capcom disclosed on Oct. 22, 2026, that a third party had accessed its CAPCOM ID service, affecting email-address records for 11,774,247 accounts worldwide as of that date, Automaton West reports. CAPCOM ID is an account used for online features in games including Street Fighter 6, VGC reports.

The affected records also included account-creation and last-login times, login counts and the IP address used for the last login, according to Automaton West. Capcom reported 43 instances involving compromised dates of birth, gender, country or region, and nicknames. Separately, it reported 196 unauthorized password changes. The company said those passwords had been reset, that it had no evidence users’ actual passwords leaked, and that no credit card information was involved in the breach, Automaton West reports.

Capcom detected signs of a potential breach on Oct. 19 and established a task force, according to Automaton West. It reported the incident to police on Oct. 21 after determining that customer information had leaked and passwords had been changed. As of its Oct. 22 disclosure, Capcom said emergency measures were complete and CAPCOM ID services were available, Automaton West reports.

Capcom warned that the leaked information could be misused in messages impersonating the company. It advised users not to open suspicious links or attachments, VGC reports.