Capcom Discloses Breach Impacting Over 11 Million Player Accounts

Capcom announced Tuesday that a security incident exposed the personal data of roughly 11.7 million registered users, confirming a breach that began earlier this year and was discovered during routine monitoring.

The company said the intrusion allowed attackers to view account information linked to its Capcom ID service. While the login credentials remain functional, the exposure has prompted a surge in phishing messages that appear to originate from Capcom, warning users to be vigilant.

Security experts note that compromised email addresses and usernames are commonly leveraged in targeted scams, often prompting recipients to click malicious links or provide additional personal details. Capcom has urged all account holders to review recent communications, avoid unsolicited links, and consider updating passwords, especially if the same credentials are used on other platforms.

The gaming sector has seen a rise in high‑profile data breaches over the past few years, with publishers such as CD Projekt and Nintendo grappling with similar challenges. These incidents underscore the growing attractiveness of gaming accounts to cybercriminals, who can monetize stolen data through account takeover services or resale on underground markets.

In response, Capcom said it has engaged independent forensic investigators, reinforced its authentication mechanisms, and will roll out additional security features in the coming weeks. The firm also indicated that it is cooperating with relevant authorities to assess the full scope of the breach.

Regulators in several jurisdictions may scrutinize the incident under emerging data‑protection laws, potentially leading to fines or mandated remedial actions. Meanwhile, users are advised to monitor their accounts for unusual activity and to enable any available two‑factor authentication options to add an extra layer of protection.