Capcom Hack: 11.7 Million CAPCOM IDs Exposed, 196 Passwords Changed

Ever worry about your account security when logging into your favorite games? Capcom just dropped some serious news that might make you double-check your login details.

The company confirmed today (the 22nd) that its CAPCOM ID service—the shared account you use to access Capcom's online services and some games—was hit by unauthorized third-party access. In total, a whopping 11,774,247 records were affected worldwide. The leaked info includes email addresses and system-specific identifiers like account creation time, last login time, login count, and the client IP address used during the last login.

But it gets a bit more personal for some. 43 accounts had additional personal data exposed, such as birthday, gender, country or region, and nickname. And here's the kicker: 196 accounts had their login passwords changed without permission. Yikes.

Capcom has already taken action. All 196 compromised passwords have been reset, and the company says it's still investigating the full scope of the unauthorized access. The good news? Passwords you set yourself haven't been confirmed leaked, and credit card information was not part of the exposed data. So at least your payment details are safe.

Still, Capcom warns that leaked email addresses and other info could be used for scams or phishing attacks down the line. They're urging players to stay sharp—if you get a suspicious email pretending to be from Capcom or a partner, don't click any links or open attachments. Your registered email can still be used, but keep an eye out for anything fishy.

So how did this happen? Capcom first spotted signs of a possible hack on October 19 and immediately blocked the unauthorized access source. They launched an investigation and confirmed the unauthorized access did occur. On October 20, an internal response team was set up to gather info and prevent further damage. That same day, they reported the incident to an external security oversight committee, and on October 21, they notified the police and the Personal Information Protection Commission.

Capcom says it has completed emergency response, identified the attack method, and taken countermeasures. They'll be contacting affected users individually and have set up a dedicated customer support channel. The company promises to keep investigating and will announce any new developments on its official website. For now, games and CAPCOM ID services are still up and running—so you can keep playing, but maybe keep an eye on your inbox.

What do you think about this? Will you be checking your CAPCOM ID account for any suspicious activity?