INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).
Capcom Confirms Data Breach Affecting 11.7 Million User Accounts
|
2026-10-22 20:22
HIGH
LOW
DATA BREACH
Executive Summary
AI-generated
On October 21, Capcom reported a data breach to the police and Japan's Personal Information Protection Commission. The attack affected approximately 11.7 million accounts, exposing customer email addresses, account creation dates, last login timestamps, IP addresses used at the last login, and in some cases, additional information such as dates of birth, gender, nicknames, and countries. Capcom confirmed that hackers changed passwords for a subset of 196 accounts but reset them, while leaving credit card information unaffected. The breach was attributed to an unknown entity, with no details on the initial access method shared by the company.
Technical Mitigations AI-generated
• Implement region-specific communication channels to submit support requests for affected customers.
• Use the Blue Report 2026's defense technique measures, such as those that detect and prevent Ragnar Locker ransomware gang attacks.
• Block or hunt for URLs and attachments in unsolicited communications and emails requesting additional information.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Ragnar LockerRagnar Locker
Target & Sectors
JP
mediamedia
Incident Timeline
November 2020
Threat actors, identified as the Ragnar Locker ransomware gang, used Ragnar Locker ransomware to target Capcom's systems in November 2020.
Click on any entity below to view its context and source!
tactic
Ransomware
In November 2020, Capcom suffered an attack claimed by the
Ragnar Locker ransomware gang
, in which attackers claimed to have
stolen 1 TB of data
.
malware
Ragnar Locker
In November 2020, Capcom suffered an attack claimed by the
Ragnar Locker ransomware gang
, in which attackers claimed to have
stolen 1 TB of data
.
data_breach
1 TB
In November 2020, Capcom suffered an attack claimed by the
Ragnar Locker ransomware gang
, in which attackers claimed to have
stolen 1 TB of data
.
April 2021
Threat actors used an old VPN device to gain access and breach Capcom's systems, affecting 11.7 million accounts.
Click on any entity below to view its context and source!
organisation
The Blue Report 2026
The Blue Report 2026 measures defenses technique by technique across 338 million simulations run in customer production environments.
October 19
Capcom detected suspicious activity and confirmed unauthorized access on October 19.
October 21
Capcom reported a data breach to the police and Japan's Personal Information Protection Commission on October 21.
Click on any entity below to view its context and source!
target_region
Japan
October 21, the company reported the incident to the police and to Japan’s Personal Information Protection Commission.
2026/10/22
Capcom confirmed a data breach affecting 11.7 million accounts, with no exposure of passwords for other registered members and credit card information remaining unaffected.
2026/10/22
Threat actors successfully breached Capcom's CAPCOM ID membership service, exposing more than 11.7 million customer email addresses and associated information.
Click on any entity below to view its context and source!
organisation
CAPCOM ID
Japanese gaming giant Capcom has confirmed that hackers breached its membership service, CAPCOM ID, exposing more than 11.7 million customer email addresses and associated information.
organisation
Resident Evil
Capcom is a Japanese video game developer and publisher known for franchises such as Resident Evil, Monster Hunter, Street Fighter, and Mega Man.
organisation
Capcom
Capcom confirms data breach affecting 11.7 million accounts.
For another subset of 196 accounts, the hackers changed the CAPCOM ID login passwords in an attempt to lock the owners out, but the company took action and reset them.
organisation
IP
Apart from emails, exposed data includes account creation date, last login timestamp, number of logins, and the IP address used at the last login.
victims
4,000 employees
The company has 4,000 employees and an annual revenue of $1.24 billion.
Tactical Metrics
Metrics
data_breach
1
Tb
Click for context!
In November 2020, Capcom suffered an attack claimed by the
Ragnar Locker ransomware gang
, in which attackers claimed to have
stolen 1 TB of data
.
Metrics
victims
4,000
Employees
The company has 4,000 employees and an annual revenue of $1.24 billion.
Intelligence Sources
BleepingComputer
2026-10-22
Capcom confirms data breach affecting 11.7 million accounts
BleepingComputer
Unpublish from Social Media?
Are you sure you want to delete this podcast video from all synchronized social networks (YouTube, Facebook, Threads)?
Important:
Due to Meta API restrictions, Instagram Reels cannot be deleted automatically via API by third-party apps.
View Profile to Delete Manually
View Profile to Delete Manually
Tactical Intelligence
Report Intelligence Issue
Podcast Options
Generate
Incident Version History
CURRENT VERSION
Last Updated: 2026-10-23T10:53
Comprehensive Tactical Telemetry
Highly Correlated Entities
6x
organisation
Identified Entity
Japan’s Personal Information Protection Commission
entity
5x
timeline
Temporal Reference
October 21
date
3x
general metric
Accounts
11,700,000
accounts
2x
tactic
Cyber Operation Type
Data Breach
tactic
Contextual Telemetry
Context Block
8 METRICS
target region
Target Country
Japan
country
industry
Targeted Sector
Media
sector
malware
Malware Payload
Ragnar Locker
tool
data breach
Tb
1
tb
general metric
Blue Report
2,026
blue report
general metric
Simulations
338,000,000
simulations
victims
Employees
4,000
employees
general metric
People
390,000
people
Click on any entity below to view its context in the main text!
Selective Unpublish
Select the networks you want to remove this post from. The system will try to delete the real post through the API and clean the database so you can publish it again.
By navigating this website, you accept the use of strictly necessary technical cookies for session security and basic platform functionality. We do not use tracking or advertising cookies. Read our Privacy Policy.