# Capcom ID data breach: 11.7 million email addresses leaked; Capcom says passwords and card details were not taken

Source: Searchable (https://searchable.pk/news/technology/capcom-id-data-breach-117-million-email-addresses-leaked-capcom-says-passwords)
Type: News article
Author: Searchable Editorial
Published: 22 Oct 2026
Updated: 22 Oct 2026
Retrieved: 25 Oct 2026

> The maker of Resident Evil and Street Fighter found the intrusion on 19 October. If you have a Capcom ID, expect phishing emails that look like they come from Capcom.

**Capcom says 11,774,247 email addresses linked to its Capcom ID accounts were leaked in a security breach**, along with each account's creation date, last login date, login count and the IP address of the most recent login, [ARY News reported](https://arynews.tv/capcom-reports-massive-data-leak-affecting-11-7-million-user-accounts-worldwide) from the company's statement on Thursday 22 October. Capcom, the Japanese publisher of Resident Evil, Street Fighter and Monster Hunter, says **no credit card information** was taken and there is **no evidence that original passwords leaked**.

## What was exposed

| Data | Accounts |
| --- | --- |
| Email address, account creation date, last login date, login count, last login IP | 11,774,247 |
| Also birth date, gender, country or region and nickname | 43 |
| Password changed by the attacker (now reset by Capcom) | 196 |
| Credit card details | none |

## Timeline

- **19 October:** Capcom noticed signs of unauthorised access and began blocking it.
- **20 October:** it set up an internal task force.
- **By 21 October:** it reported the breach to the police and to Japan's Personal Information Protection Commission.

Capcom has not said how the attackers got in. It says it is still investigating and is contacting affected customers.

## What to do if you have a Capcom ID

1. **Treat Capcom-looking emails with suspicion.** With 11.7 million addresses out, phishing is the main risk: do not click login links in emails, open the site or app yourself.
2. **Change your password** if you reused your Capcom password anywhere else, starting with your email account.
3. **Turn on two-step verification** on your email, Steam, PlayStation and Xbox accounts.
4. If you got an email from Capcom saying your password was reset, you are one of the 196 accounts the attacker changed; follow only the steps on Capcom's own site.

The same week, a flaw in PHP took government websites offline in Europe: [our report on the PHP security flaw](/news/technology/php-security-flaw-found-by-ai-takes-government-websites-offline-in-europe-update).

## Frequently asked questions

**Were passwords leaked in the Capcom breach?**

Capcom says there is no evidence that original passwords leaked. The attacker changed the passwords of 196 accounts, which Capcom has reset. No credit card data was taken.

## Sources

- Capcom reports massive data leak affecting 11.7 million user accounts worldwide (22 Oct 2026) (ARY News): https://arynews.tv/capcom-reports-massive-data-leak-affecting-11-7-million-user-accounts-worldwide

How to cite: "Capcom ID data breach: 11.7 million email addresses leaked; Capcom says passwords and card details were not taken", Searchable, 22 Oct 2026, https://searchable.pk/news/technology/capcom-id-data-breach-117-million-email-addresses-leaked-capcom-says-passwords