Capcom discloses unauthorized access affecting millions of user accounts

Capcom announced that a third-party intrusion into its Capcom ID platform resulted in the exposure of personal information for more than 11.7 million users. The compromised data includes account email addresses, birth dates, gender, country or region, and nicknames for a subset of accounts, along with unauthorized password changes for 196 accounts. No credit-card information was part of the breach.

The company detected suspicious activity on October 19, immediately halted access, and launched a forensic review, reporting the incident to local law enforcement and its external security advisory board. Capcom says it has identified and mitigated the attack method, and all services that depend on Capcom ID, including online features in games like Street Fighter 6, continue to function. Nevertheless, users are cautioned to be vigilant for phishing emails that could exploit the leaked details.