A hacker managed to break into Capcom’s online account system and potentially steal email address data on 11.7 million user accounts.
The breach reported today by the Japanese video game maker affects Capcom ID, the online account system used for the company’s digital store and games, including the Street Fighter 6, Monster Hunter, and Resident Evil franchises.
The intrusion may have exposed email and IP addresses for 11.7 million accounts worldwide. Capcom also revealed evidence that the hacker had access to the date of birth, gender, country/region and nickname for 43 records. Another 196 accounts have changed their passwords.
(Credit: Capcom)
Capcom detected suspicious activity related to the hack on Monday, October 19, prompting an investigation and, ultimately, the implementation of emergency measures to lock down its IT systems. The source of the breach remains unclear, but the company warns affected users to beware of phishing emails or messages that may appear to be from Capcom.
“This incident does not affect players’ ability to access or play our games,” it said. Customers can still log into their accounts, including the 196 users whose passwords were changed; Capcom has since reset the login credentials for these affected accounts.
Recommended by our editors
“Going forward, Capcom will notify customers affected by this incident. Credit card information was not among the affected information,” the company adds.
This comes nearly six years after a 2020 ransomware attack that involved data from up to 350,000 Capcom customers and business partners. The Ragnar Locker gang claimed responsibility for the attack; Europol later dismantled the group.
About Our Expert
Michael Kan
Chief Reporter
Experience
I have been a journalist for over 15 years. I got my start as a school and urban reporter in Kansas City and joined PCMag in 2017, covering satellite internet services, cybersecurity, PC hardware, and more. I am currently based in San Francisco, but previously spent over five years in China, covering the country’s technology sector.
Since 2020, I have covered the launch and explosive growth of SpaceX’s Starlink satellite internet service, writing 600+ stories about availability and feature launches, but also the regulatory battles over the expansion of satellite constellations, fights with rival suppliers such as AST SpaceMobile and Amazon, and the effort to expand into satellite-based mobile service. I combed through FCC filings for the latest news and drove to remote corners of California to test Starlink’s cellular service.
I also cover cyber threats, from ransomware gangs to the emergence of AI-based malware. In 2024 and 2025, the FTC forced Avast to pay consumers $16.5 million for secretly collecting and selling their personal information to third-party customers, as disclosed in my joint filing. investigation with motherboard.
I also cover the PC graphics card market. Pandemic-era shortages led me to camp out in front of a Best Buy to get an RTX 3000. I am now tracking how the AI-driven memory shortage will affect the entire consumer electronics market. I’m always eager to learn more, so please jump into the comments with feedback and send me tips.
Read the full bio