Capcom Co., Ltd. (Capcom) has determined that certain customer information associated with CAPCOM ID*1, an online membership account service operated by the company, was subject to unauthorized access by a third party. Capcom sincerely apologizes for the complications and concern this has caused its customers and other stakeholders.<\/p>\n
(*1 CAPCOM ID is a unified account that registrants can use to access various web services, and which is needed to play certain Capcom games online.)<\/p>\n \n
Capcom has completed the necessary emergency response measures, and services that use CAPCOM ID remain available for use. Additionally, this incident does not affect players\u2019 ability to access or play any of our games. The facts confirmed at this time and the company\u2019s response to the incident are outlined below.<\/p> \n \n
1. Overview of Information Affected (as of October 22)<\/p>\n
(1) Email address records, system-specific identifier information*2 (2) Records of date of birth, gender, country\/region, and nickname (3) Unauthorized changes to CAPCOM ID account login passwords Capcom has not confirmed any compromise of CAPCOM ID account login passwords originally set by customers themselves. However, the company has confirmed that passwords were changed without authorization on 196 accounts. The passwords associated with these accounts have already been reset, and the company continues to investigate the scope of any impact resulting from this incident.<\/p>\n \n Going forward, Capcom will notify customers affected by this incident. Credit card information was not included among the affected information.<\/p> \n\n \n 2. Timeline of Events<\/p> \n October 19, 2026 October 20, 2026 October 21, 2026 3. Advisory to Customers<\/p>\n Email addresses registered with CAPCOM ID may continue to be used without interruption. However, there is a possibility that the affected information could be misused to send fraudulent emails or other communications impersonating Capcom or related parties. If you receive any suspicious email or message, please exercise caution and refrain from accessing any URLs contained therein or opening any attached files.<\/p> \n \n 4. Capcom\u2019s Response and Next Step<\/p>\n Capcom has completed emergency response measures and has identified and addressed the attack method involved in this incident. Services that use CAPCOM ID, including games, remain available. Going forward, the company will begin contacting affected customers and has established dedicated customer-support channels for inquiries regarding this matter.<\/p> \n \n Data Security Incident Dedicated Customer-Support Channels<\/p> \n Japan<\/p>\n Dedicated Capcom ID Data Security Incident Support Line North, Central and South America<\/p>\n Capcom USA Customer Support Page Europe, Middle East and Africa (EMEA)<\/p>\n
Number of affected records: 11,774,247 records (worldwide total)
\n(*2 Date and time of account creation, date and time of last login, number of logins, client IP address used during last login)<\/span><\/p> \n\n\n
\nNumber of affected records: of the total in (1), 43 records<\/p>\n\n
\nNumber of affected accounts: of the total in (1), 196 accounts<\/p>\n<\/div> \n \n
\nCapcom detected suspicious activity indicating potential unauthorized access to CAPCOM ID and immediately began blocking the access while investigating the cause and scope of the incident. On the same day, the company confirmed that unauthorized access had occurred. In response, the company implemented emergency measures and proceeded with identifying and addressing the method of attack.<\/p>\n \n
\nCapcom established an internal incident response headquarters and continued information gathering and measures to prevent further impact. As a result of the investigation, Capcom confirmed that certain customer information registered with CAPCOM ID had been subject to unauthorized access. The company also confirmed that passwords associated with a limited number of accounts had been changed without authorization. On the same day, Capcom reported the matter to the Information Technology Security Oversight Committee, the company\u2019s external advisory body.<\/p>\n \n
\nCapcom reported the incident to the Osaka Prefectural Police and Japan\u2019s Personal Information Protection Commission. The company continues to monitor the situation, investigate the incident, and assess the full scope of the impact.<\/p> \n \n \n
\nTelephone (toll-free): 0120-801-271
Hours: 10:00 a.m. to 8:00 p.m. (JST)<\/p>\n <\/div>\n \n
\nInquiry Form: https:\/\/www.capcom-support.com\/hc\/en-us\/requests\/new<\/a><\/p>\n<\/div>\n \n