Street Fighter and Monster Hunter Maker Capcom Confirms Major Data Leak

Capcom Data Breach: Over 11 Million User IP Addresses and Emails Exposed

Protecting your personal information online is essential because data breaches can happen at any time. Staying informed and taking security measures can help reduce your risk of becoming a victim and prevent further damage.

Case in point: a recent data breach reported by CAPCOM. According to PC Gamer, more than 11 million accounts were breached, with varying degrees of information leaked.

CAPCOM has also released an official statement about the data breach (statement translated):

“It has been found that some of your information has been leaked to the outside world due to unauthorized access by a third party in the online member service "CAPCOM ID" operated by our company. We deeply apologize for the inconvenience and concern caused to our customers and related parties.”

The number of affected accounts is as follows:

11,774,247 Cases - Leaked Email Address, Account Creation Date and Time, Last Log-in Details, Number of Log-ins, IP Address of Last Log-in

43 Cases - Leaked DOB, Gender, Country/Region and Nickname

196 Cases - Unauthorized Change of Login Password

The data breach was first detected on October 19, 2026. CAPCOM responded immediately and reported the incident to the authorities. As of this writing, the company is still investigating cases involving unauthorized changes to login information.

Possible Effect of Data Breach

Fortunately, the data breach was limited to basic information on millions of users. However, this does not mean the attack should be ignored. IP address, along with log-in information, could be used to create a user profile. Identity theft often starts with creating a simple profile like the ones leaked from CAPCOM. CAPCOM’s data breach is also significant because of its gaming customers. From fighting games like Street Fighter to RPGs like Monster Hunter, players use CAPCOM ID to manage their profiles and account information across Capcom services.

History of Data Breaches in Gaming

This is not the first data breach to affect the gaming industry. In 2011, PlayStation Network reported a “compromised” connection and data breach. PSN was temporarily shut down while the company dealt with the leak, according to the announcement. Armor Games, maker of small, browser-based games, also reported a data leak in 2019.

Like CAPCOM, PlayStation and Armor Games publicly announced the breach and sought help from authorities to investigate and address the incident.

Next Steps: Proactive Measures to Secure Your Account

If you’re a CAPCOM user, it’s very important to take some proactive security measures for your account. Changing your username and password is highly recommended. It’s also important to check if your account was used in an unfamiliar location. CAPCOM is also keeping affected users informed about the incident. If the data breach on your account is serious, you should have received an email by now.

Security breaches like this should not be taken lightly. Cybercriminals may exploit stolen data to impersonate victims, take over their online accounts, or demand money for keeping their personal information private. Following recommended security measures after a breach is reported can help prevent further damage and data leaks.