INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Capcom Confirms Data Breach Affecting 11.7 Million User Accounts

| 2026-10-22 20:22 HIGH LOW DATA BREACH
Executive Summary
AI-generated
On October 21, Capcom reported a data breach to the police and Japan's Personal Information Protection Commission. The attack affected approximately 11.7 million accounts, exposing customer email addresses, account creation dates, last login timestamps, IP addresses used at the last login, and in some cases, additional information such as dates of birth, gender, nicknames, and countries. Capcom confirmed that hackers changed passwords for a subset of 196 accounts but reset them, while leaving credit card information unaffected. The breach was attributed to an unknown entity, with no details on the initial access method shared by the company.
Technical Mitigations AI-generated
• Implement region-specific communication channels to submit support requests for affected customers. • Use the Blue Report 2026's defense technique measures, such as those that detect and prevent Ragnar Locker ransomware gang attacks. • Block or hunt for URLs and attachments in unsolicited communications and emails requesting additional information.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Ragnar LockerRagnar Locker
Target & Sectors
JP
mediamedia
Incident Timeline
‎November 2020
Threat actors, identified as the Ragnar Locker ransomware gang, used Ragnar Locker ransomware to target Capcom's systems in November 2020.
tactic Ransomware
malware Ragnar Locker
data_breach 1 TB
‎April 2021
Threat actors used an old VPN device to gain access and breach Capcom's systems, affecting 11.7 million accounts.
organisation The Blue Report 2026
‎October 19
Capcom detected suspicious activity and confirmed unauthorized access on October 19.
‎October 21
Capcom reported a data breach to the police and Japan's Personal Information Protection Commission on October 21.
target_region Japan
‎2026/10/22
Capcom confirmed a data breach affecting 11.7 million accounts, with no exposure of passwords for other registered members and credit card information remaining unaffected.
‎2026/10/22
Threat actors successfully breached Capcom's CAPCOM ID membership service, exposing more than 11.7 million customer email addresses and associated information.
organisation CAPCOM ID
organisation Resident Evil
organisation Capcom
organisation IP
victims 4,000 employees
Tactical Metrics
Metrics
data_breach
1
Tb
Metrics
victims
4,000
Employees
Intelligence Sources
BleepingComputer 2026-10-22