Digital Trust PractitionersAssociation of Digital Trust Practitioners · TrustPractitioners.org
JoinJoin
BREACH WATCH BRIEF High 🔑 Breach

Capcom breach leaks 11.7M email addresses and account details

Capcom disclosed a data breach exposing 11.7 million email addresses and account details after hackers accessed its CAPCOM ID service. Japanese gaming company Capcom has disclosed a data breach discovered on October 19 involving its CAPCOM ID service, which provides access to online services and games. As of October 22, attackers stole 11,774,247 email addresses, […]

ADTP Breach Watch · October 24, 2026 · Security Affairs
SeverityHigh
Type🔑 Breach
ConfidenceHigh
ReportedOct 24, 2026
Technology & SaaS Video‑game publishers Online‑gaming platforms Third‑party developers using CAPCOM ID for authentication Global end‑users with Capcom accounts Unknown Data Exfiltration

What happened

On October 19, 2026 attackers accessed Capcom's CAPCOM ID service, exposing 11,774,247 email addresses and related account metadata. A small number of records also included DOB, gender, country/region, and nickname, and 196 passwords were illicitly changed before being reset.

Why it matters for trust and compliance

  • A breach at one organization is a third-party event for everyone who shares data with it. Check whether it reaches your vendors or your data.

Who is affected

Video‑game publishers Online‑gaming platforms Third‑party developers using CAPCOM ID for authentication Global end‑users with Capcom accounts

Recommended actions

  1. Map all integrations with CAPCOM ID and assess data flow exposure.
  2. Enforce MFA and anomaly‑based login monitoring for privileged and service accounts.
  3. Request Capcom's incident‑response disclosure and remediation roadmap.
  4. Notify your users of phishing risks and enforce a password‑reset policy.

Regulations library

Every US state privacy law, on one map

24 states have a comprehensive privacy law in the library, alongside the EU, UK, US federal and global laws: 102 in all, each explained in plain words with its sources. Select a state to see what applies there.

Explore the mapFollow Regulatory Watch
  • In force
  • Coming into force
  • Sector laws
AK ME VT NH WA ID MT ND MN IL WI MI NY RI MA OR NV WY SD IA IN OH PA NJ CT CA UT CO NE MO KY WV VA MD DE AZ NM KS AR TN NC SC DC OK LA MS AL GA HI TX FL

Get the Breach Digest

The incidents that matter for your vendors and your data, analysed for practitioners, in one email.