Capcom revealed that a data breach compromised 11,774,247 Capcom ID accounts. The breach exposed email addresses and system-specific identifier information on all affected accounts. An additional 43 accounts had their date of birth, gender, country/region, and nickname records accessed.
The company discovered suspicious activity on October 19th. Capcom confirmed that 196 accounts had passwords changed without authorization. Those passwords have been reset. Capcom stated it has not confirmed any compromise of original customer-set passwords.
Credit card information was not included in the breach. The affected accounts are used to play online in games including Street Fighter 6, Resident Evil, and Monster Hunter titles.
Capcom warned that exposed email addresses could be used for phishing attacks impersonating Capcom or related parties. The company advised users to avoid clicking URLs or opening attachments in suspicious emails.
Capcom reported the breach to Osaka's Prefectural Police and Japan's Personal Information Protection Commission. The company said it identified and addressed the attack method and will conduct a detailed investigation into preventive measures.