26.10.2026 07:10
World-famous gaming giant Capcom announced that as a result of a cyberattack, information belonging to 11,774,247 user accounts worldwide was leaked. During the attack, email addresses and IP information were captured, the passwords of 196 accounts were changed without authorization, and the address and purchase history of 43 users were accessed. Stating that credit card information was not affected, the company warned users against fake emails and fraud attempts.
The world-famous Japanese game company Capcom announced that it suffered a major cyberattack affecting millions of users. According to data shared by the company, information belonging to 11,774,247 Capcom ID accounts worldwide was exposed. During the attack, users' email addresses, account information, and IP addresses were captured, while it emerged that the passwords of 196 accounts were changed without authorization.
INFORMATION OF 11.7 MILLION USERS EXPOSED
Capcom, one of the world's leading game companies, shared with the public the details of the cyberattack targeting user accounts. According to the company's statement, as a result of the attack, various information belonging to 11,774,247 Capcom ID accounts worldwide was leaked.
The captured data includes users' email addresses, account creation dates, last login times, login counts, and IP addresses used during the last connection. It was stated that for some accounts, birth date, gender, country or region, and nickname information were also exposed.
PASSWORDS OF 196 ACCOUNTS CHANGED WITHOUT AUTHORIZATION
It emerged that the cyberattack was not limited to the leakage of personal information. Capcom announced that attackers changed the login passwords of 196 user accounts without authorization.
The company took security measures by resetting the passwords of the said accounts. It was reported that credit card information was not affected by the attack in the investigations carried out.
ADDRESS AND PURCHASE INFORMATION OF 43 USERS ACCESSED
It was determined that through 43 of the 196 accounts whose passwords were changed, Capcom's online store in Japan, e-Capcom, was accessed. In these accounts, users' names, phone numbers, postal codes, addresses, gender, and birth dates, as well as their purchase histories, were exposed.
It was also determined that records of conversations with customer service and address book information registered in the accounts became accessible to attackers. Capcom announced that the additional data leak in question was limited to 43 accounts in Japan. The company announced that affected users would be informed individually.
CYBERATTACK DETECTED ON OCTOBER 19
Capcom noticed suspicious activity in its systems on October 19 and began efforts to prevent unauthorized access. On October 20, an incident response center was established within the company, and on October 21, information was provided to the Osaka police and Japan's personal data protection authority.
The company, which announced that the method used to carry out the attack had been identified and necessary emergency security measures had been taken, did not share technical details with the public. Meanwhile, it was stated that Capcom ID services continue to be used and that there is no obstacle to players' access to games.
WARNING TO USERS ABOUT FAKE EMAILS
Capcom warned its users that the leaked personal information could be used in fraud and phishing attacks. The company asked users to be careful, especially against fake emails that appear to have been sent by Capcom or related services.
Users were advised not to click on links in suspicious messages and not to open unknown attachments. Capcom announced that it would contact people affected by the incident and that regional support channels had been established for users' applications.