← Back to GPN · All articles

Capcom Confirms Unauthorized Access Hit Millions of CAPCOM ID Records

OFFICIAL Written by GPN · Nov 1, 2026, 8:22 PM ET · Capcom · Tech

Capcom has confirmed that customer information connected to its CAPCOM ID membership service was subject to unauthorized access by a third party. In a notice dated October 22, 2026, the company apologized to customers and other stakeholders for the concern caused by the incident.

The notice puts the worldwide total at 11,774,247 affected records. For the main group covered, the information listed includes email addresses together with system-specific account details such as when an account was created, when it was last used, how many times it had been used, and the client internet address used at the last login.

Capcom also confirmed a much smaller, separate impact on account passwords. It said passwords were changed without authorization on 196 accounts. At the same time, the company said it had not confirmed any compromise of the login passwords that customers had originally set themselves.

The timeline set out by Capcom begins on October 19, 2026, when suspicious activity indicating potential unauthorized access was detected and blocking measures began while the cause and scope were investigated. On October 20, the company established an internal incident response headquarters and continued gathering information and working to prevent further impact.

On October 21, Capcom reported the incident to the Osaka Prefectural Police and to Japan's Personal Information Protection Commission. The company said it had completed the necessary emergency response measures, that services using CAPCOM ID remain available, and that the incident does not affect players' ability to access or play its games.

Facts gathered from

More on this