Capcom confirmed on October 22, 2026 that a third party gained unauthorized access to customer data tied to Capcom ID, affecting 11,774,247 records worldwide, in a notice and apology on its investor site. Capcom ID is the account behind Capcom’s web services and the online modes of some of its games.
The Details
What was exposed. Most of the affected records are email addresses plus login data: when the account was created, the last login time, the number of logins and the IP address used for the last login. For 43 of those records, the data also included date of birth, gender, country or region, and nickname.
Passwords. Capcom says it has not confirmed that any password a customer set was stolen. It did find that passwords were changed without permission on 196 accounts, and it has already reset them.
What was not exposed. Credit card information was not part of the affected data.
The timeline Capcom gives:
- October 19: it detected suspicious activity, started blocking the access and confirmed unauthorized access the same day.
- October 20: it set up an internal response team and confirmed the password changes.
- October 21: it reported the incident to the Osaka Prefectural Police and Japan’s Personal Information Protection Commission.
Capcom says it has identified and dealt with the attack method, and that its investigation into the full scope continues.
What This Means for Players
Your games still work. Capcom says Capcom ID services remain available and the incident does not affect anyone’s ability to play its games, from Monster Hunter Wilds to the Resident Evil series.
Watch your inbox. The real risk is phishing. Capcom warns that the leaked email addresses could be used for fake messages that pretend to come from Capcom or related companies. Do not click links or open attachments in an unexpected “Capcom” email; go to Capcom’s site directly instead.
Check your account. If you use a Capcom ID, changing its password costs nothing, especially if you reuse that password anywhere else. Capcom says it will contact affected customers directly.
If you are mid-way through a Capcom game such as Resident Evil Requiem, nothing about your saves or progress is mentioned in the notice.
When and Where
- Announced: October 22, 2026, in a Capcom press release.
- Affected: 11,774,247 Capcom ID records worldwide; 196 accounts had their passwords reset.
- Support: Capcom’s customer support form for the Americas and EMEA; Capcom lists separate contacts for Japan and Asia in its notice.
Source: Capcom Co., Ltd., “Notice and Apology Regarding Customer Information Affected Through Unauthorized Access,” October 22, 2026.