Capcom Reveals Data Breach Affecting More Than 11 Million User Accounts

On Tuesday, Capcom disclosed that a security breach had revealed personal information belonging to about 11.7 million registered users, confirming an intrusion that started earlier this year and was identified through routine monitoring.

According to the firm, the breach gave malicious actors access to account data associated with its Capcom ID service. Although the compromised login details still work, the leak has triggered a wave of phishing emails masquerading as messages from Capcom, urging users to stay alert.

Security specialists point out that stolen email addresses and usernames are frequently exploited in targeted scams, which typically coax recipients into clicking harmful links or divulging further personal information. Capcom has advised every account owner to examine recent messages, steer clear of unsolicited links, and think about changing passwords, particularly when the same login information is reused elsewhere.

In recent years, the video‑game industry has experienced an increase in high‑profile data breaches, with companies like CD Projekt and Nintendo confronting comparable issues. Such events highlight how appealing gaming accounts have become to cyber‑criminals, who can profit by offering account‑takeover services or selling the data on black‑market platforms.

Capcom responded by hiring independent forensic investigators, strengthening its authentication systems, and planning to introduce further security enhancements over the next few weeks. The company also noted that it is working with appropriate authorities to evaluate the breach’s full extent.

Regulators across multiple jurisdictions could examine the case under new data‑protection regulations, which might result in fines or required corrective measures. In the meantime, users should keep an eye on their accounts for any odd activity and activate any offered two‑factor authentication to bolster security.