Capcom Confirms Massive Data Breach Affecting 11.7 Million Users

Capcom has confirmed a major data breach that exposed personal information associated with more than 11.7 million CAPCOM ID accounts. The incident also allowed an unauthorized third party to change passwords on 193 accounts.

According to Capcom’s official announcement, the exposed data includes email addresses, IP addresses, account creation details, account activity, and login information.

The company says account passwords and credit card information were not leaked, and the breach has not disrupted access to games or online multiplayer services.

What information did the Capcom data breach expose?

The breach affected more than 11.7 million CAPCOM ID accounts, exposing information that attackers could potentially use for phishing attempts and other targeted scams.

Capcom confirmed that the compromised data included email addresses, IP addresses, account creation information, and records of account activity and logins.

More than 43 users also had additional personal information exposed, including dates of birth, countries or regions, and account nicknames.

The company also identified 193 accounts where an unauthorized party changed passwords. However, Capcom maintains that attackers did not obtain users’ account passwords or payment card information.

Capcom responds to the breach and warns users

Capcom says it has identified and addressed the method attackers used to access its systems. The company has also started contacting affected users and providing customer support.

Although the company says passwords were not leaked, users should remain cautious about suspicious emails, messages, links, and attachments that appear to come from Capcom.

Users can also change their CAPCOM ID passwords as an additional precaution, particularly if they notice unusual activity on their accounts.

Capcom confirmed that CAPCOM ID services remain operational and that players can continue accessing their games and online multiplayer features.

The incident comes amid growing concerns about cybersecurity threats. Google Cloud recently warned about critical PHP vulnerabilities affecting millions of websites, while millions of attacks targeted PHP websites within hours of disclosure.

Separately, Microsoft revealed that Chinese hackers used an AI-powered tool to breach ConnectWise and target hundreds of organizations worldwide.