INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Capcom Experiences Data Breach Impacting 11 Million Users Worldwide

| 2026-10-23 08:34 HIGH LOW DATA BREACH
Executive Summary
AI-generated
On October 19, a data breach was discovered at Capcom, impacting approximately 11 million email addresses and the personal information of around 43 individuals. The hackers gained unauthorized access to CAPCOM ID, stealing email addresses along with account data such as creation date, last login date, number of logins, and IP address. For some customers, this included dates of birth, gender information, country/region details, and nicknames. Capcom has reported the breach to relevant authorities and continues to investigate it, while also resetting passwords for affected users and implementing incident response measures. The company warns affected users about unsolicited emails with suspicious URLs or attachments, emphasizing its commitment to strengthening its information security system.
Technical Mitigations AI-generated
• Block suspicious URLs and attachments in email messages impersonating Capcom or related entities. • Implement CAPCOM ID account password reset measures for affected users, using a secure method such as a one-time password (OTP) sent via SMS or authenticator app. • Monitor IP addresses associated with the breach to detect potential future attacks.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
JP
Incident Timeline
‎October 19
Threat actors used unauthorized access to exploit vulnerabilities in CAPCOM ID's shared service, resulting in the breach.
organisation CAPCOM ID
‎2026/10/23
Threat actors stole the email addresses of 11,774,247 people along with account data from Capcom's systems.
organisation Capcom Data Breach
organisation Capcom
organisation Medi-Cal Members Affected
organisation Paradigm Healthcare Data Breach
data_breach 1.8 Records
data_breach 970,000 Cal Members
Tactical Metrics
Metrics
data_breach
1,800,000
Records
Metrics
data_breach
970,000
Cal Members
Intelligence Sources
SecurityWeek 2026-10-23