INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Capcom Exposes 11.7 Million Email Addresses

| 2026-10-24 10:21 HIGH LOW DATA BREACH
JSON
Executive Summary
AI-generated
On October 19, Capcom discovered a data breach involving its CAPCOM ID service, which provides access to online services and games. Hackers accessed the service, exposing 11.7 million email addresses and account details after Capcom disclosed that unauthorized access occurred on October 22. The attackers stole email addresses along with creation dates, last login dates, login counts, and IP addresses used for latest logins. In 43 cases, hackers exposed date of birth, gender, country/region, and nickname. Capcom has activated its incident response procedures and confirmed services using CAPCOM ID remain operational; the company is investigating the breach and contacting affected customers through a dedicated support channel, urging users to watch out for phishing attempts involving emails impersonating Capcom or partners with suspicious links or attachments.
Technical Mitigations AI-generated
• Block suspicious emails impersonating Capcom or its partners, particularly those containing links or attachments. • Implement CAPCOM ID password reset procedures for affected accounts to prevent unauthorized changes. • Monitor IP addresses used for logins and block any unusual activity.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Ragnar LockerRagnar Locker
Target & Sectors
JP
Incident Timeline
‎November 2020
Ragnar Locker ransomware gang previously targeted Capcom in November 2020, claiming to have stolen approximately 1 TB of data.
tactic Ransomware
Capcom was previously targeted by the Ragnar Locker ransomware gang in November 2020 .
malware Ragnar Locker
Capcom was previously targeted by the Ragnar Locker ransomware gang in November 2020 .
organisation SecurityAffairs
Follow me on Twitter:  @securityaffairs  and  Facebook  and  Mastodon Pierluigi Paganini ( SecurityAffairs  – hacking, data breach) facebook linkedin twitter Capcom Cybercrime data breach Hacking hacking news information security news IT Information Security Pierluigi Paganini Security Affairs Security News
organisation Capcom Cybercrime
Follow me on Twitter:  @securityaffairs  and  Facebook  and  Mastodon Pierluigi Paganini ( SecurityAffairs  – hacking, data breach) facebook linkedin twitter Capcom Cybercrime data breach Hacking hacking news information security news IT Information Security Pierluigi Paganini Security Affairs Security News
organisation IT Information Security
Follow me on Twitter:  @securityaffairs  and  Facebook  and  Mastodon Pierluigi Paganini ( SecurityAffairs  – hacking, data breach) facebook linkedin twitter Capcom Cybercrime data breach Hacking hacking news information security news IT Information Security Pierluigi Paganini Security Affairs Security News
organisation Security Affairs
Follow me on Twitter:  @securityaffairs  and  Facebook  and  Mastodon Pierluigi Paganini ( SecurityAffairs  – hacking, data breach) facebook linkedin twitter Capcom Cybercrime data breach Hacking hacking news information security news IT Information Security Pierluigi Paganini Security Affairs Security News
data_breach 1 TB
The attackers claimed to have stolen 1 TB of data, potentially affecting up to 390,000 people.
‎October 19
Threat actors used unknown methods to target Capcom's CAPCOM ID service on October 19, resulting in the exposure of approximately 11.7 million email addresses.
tactic Data Breach
Japanese gaming company Capcom has disclosed a data breach discovered on October 19 involving its CAPCOM ID service, which provides access to online services and games.
target_region Japan
Japanese gaming company Capcom has disclosed a data breach discovered on October 19 involving its CAPCOM ID service, which provides access to online services and games.
‎October 22
Threat actors stole 11,774,247 email addresses along with associated account details from Capcom on October 22.
organisation IP
As of October 22, attackers stole 11,774,247 email addresses, along with account details including creation dates, last login dates, login counts, and the IP addresses used for the latest logins.
general_metric 11,774,247 email addresses
As of October 22, attackers stole 11,774,247 email addresses, along with account details including creation dates, last login dates, login counts, and the IP addresses used for the latest logins.
‎2026/10/24
Hackers accessed Capcom's CAPCOM ID service, resulting in the leakage of 11.7 million email addresses and account details.
organisation Capcom Data Breach
Capcom Data Breach Exposes 11.7 Million Email Addresses.
organisation Capcom
Capcom Data Breach Exposes 11.7 Million Email Addresses Capcom disclosed a data breach exposing 11.7 million email addresses and account details after hackers accessed its CAPCOM ID service.
organisation CAPCOM ID
Capcom Data Breach Exposes 11.7 Million Email Addresses Capcom disclosed a data breach exposing 11.7 million email addresses and account details after hackers accessed its CAPCOM ID service.
organisation the Security Oversight Committee
On the same day, the incident was reported to the Security Oversight Committee, our external advisory organization.”
infrastructure 1 online membership service
“We have recently discovered that unauthorized access by a third party occurred to our online membership service “CAPCOM ID” (*1) , resulting in the leakage of some customer information.” reads the company’s notice .
data_breach 11,774,247 Number
“Number of leaked email addresses and system-specific identification information: 11,774,247 (worldwide total)” In 43 cases, hackers exposed date of birth, gender, country/region, and nickname.
Tactical Metrics
Metrics
infrastructure
1
Online Membership Service
“We have recently discovered that unauthorized access by a third party occurred to our online membership service “CAPCOM ID” (*1) , resulting in the leakage of some customer information.” reads the company’s notice .
Metrics
data_breach
11,774,247
Number
“Number of leaked email addresses and system-specific identification information: 11,774,247 (worldwide total)” In 43 cases, hackers exposed date of birth, gender, country/region, and nickname.
Metrics
data_breach
1
Tb
The attackers claimed to have stolen 1 TB of data, potentially affecting up to 390,000 people.
Intelligence Sources
Security Affairs 2026-10-24