Email Addresses of More Than 11.7 Million Capcom ID Accounts Leaked

Capcom has confirmed that the data of more than 11.7 million Capcom ID users was leaked. An outside party gained unauthorized access to the company’s online membership service. Capcom ID remains operational, but the stolen email addresses could be used in fraudulent emails sent in the company’s name.

The email addresses of millions of accounts were obtained during the incident. In addition, the dates of birth, genders, countries or regions, and nicknames associated with 43 accounts were leaked. The passwords of 196 accounts were changed without authorization. According to Capcom, customers’ payment card information was not leaked.

The incident began on October 19, when suspicious activity was detected in the Capcom ID system. The company immediately blocked access to the system and investigated the cause and scope of the attack. The investigation confirmed that the system had been accessed without authorization. Capcom contacted local police and an external advisory board overseeing security.

The company said it had identified the attack method and closed the security vulnerability. Services requiring Capcom ID, as well as online games including Street Fighter 6, continue to operate. Because the stolen data could be used in fraudulent messages sent in Capcom’s name, users are advised to be vigilant about suspicious emails.