Hackers Changed Users’ Passwords in 11.7M-Account Capcom Breach

Hackers changed the passwords on 196 CAPCOM ID accounts during a breach affecting more than 11.7 million accounts worldwide, Capcom disclosed Oct. 22.^[1]

The company has reset those accounts’ passwords. It has not confirmed that users’ existing passwords were leaked, and it said the exposed data did not include credit card information.

"Going forward, Capcom will notify customers affected by this incident," Capcom wrote in its English notice.^[2] "Credit card information was not included among the affected information."

If you get an email asking you to fix your account, check for signs of phishing before following its instructions.

Thanks for subscribing!

Please check your email for your first message.

Never miss the privacy news that affects you.

Join thousands who get the latest security news, scams, and policy changes every week, right to their inbox.

Sign me up

By submitting this form you agree to receive emails from All About Cookies and to the privacy policy and terms.

What information was exposed?

The breach exposed email addresses and account information for 11,774,247 accounts, including:

• Account creation dates
• Last login dates and times
• Number of logins
• IP addresses used for the most recent login

For 43 accounts, the exposed information also included birth dates, gender, country or region, and nicknames.

Capcom detected the intrusion Oct. 19. It says games remain playable and affected customers will be contacted individually.

Why a fake security email could be convincing

A real breach gives scammers a ready-made excuse to contact you. A message claiming your account needs attention may sound plausible right after you read that the company was hacked.

An email address also gives someone a way to reach you. A fraudulent message could claim your password reset failed, ask you to confirm your login, or direct you to a page designed to steal your credentials.

Those are examples of what to watch for, rather than attacks Capcom has confirmed in this incident. The Federal Trade Commission recommends contacting a company through a website or phone number you already know is real when a message asks you to click a link or open an attachment.

What CAPCOM ID users should do

Start by opening the official CAPCOM ID website yourself. That lets you check your account without relying on a link in an unexpected message.

• Check that you can sign in. If you’re locked out, use the account recovery options on the official site.
• Use a unique password. If you’ve reused your CAPCOM ID password elsewhere, replace those copies so one compromised login can’t unlock several accounts.
• Protect your email account. Give it a separate password and turn on two-factor authentication. Access to your inbox can let someone intercept password recovery messages for other services.
• Treat unexpected downloads cautiously. A message offering a security fix or asking you to install software deserves a separate check with official support.

If you need help with your account, North American customers can use Capcom’s support form.

After a breach, an email telling you to secure your account can arrive exactly when you expect it. If it sends you to a fake login page, entering your password could give scammers access.

Security software with phishing protection can flag dangerous sites before you enter your details, giving you another chance to catch a convincing fake.

#1 Antivirus Protection From an Award-Winning Brand You Trust

5.0

AllAboutCookies writers and editors score products based on a number of objective features as well as our expert editorial assessment. Our partners do not influence how we rate products.

Editorial Rating

Claim Deal

On Norton 360 Antivirus's website

2026 Editors’ Choice

Best All-In-One Antivirus

Antivirus Software

Norton 360 Antivirus

PROMOTION: Save Up to 76%

• Our #1 rated antivirus that scores 18/18 on AV-TEST across Windows, macOS, and Android, verified across multiple test rounds
• Passed every malware, drive-by download, and phishing detection test we ran, quarantining threats automatically
• Backed by a 100% Virus Protection Promise: if Norton can't remove a virus, you get your money back

Author Details

Thomas Kent

About the Author

Thomas Kent is a multi-disciplined reporter with over a decade of experience covering online platforms, digital trends, and consumer-facing tech. Tom focuses on digital privacy, data tracking, and user behavior, with a particular interest in how cookies, online surveillance, and platform design shape the modern internet experience. His reporting takes a research-driven, news-focused approach, translating complex technical topics into clear, accessible insights.