CAPCOM ID discloses 11,774,247 leaked records and unauthorized password changes
Based on Capcom's October 22 announcement. The total is worldwide, not Japan alone. This article does not establish a causal link to the PHP vulnerabilities.
IllustrationCapcom said on October 22 that unauthorized access to CAPCOM ID exposed 11,774,247 records worldwide, including email addresses and system identifiers. Passwords were changed without authorization on 196 affected accounts and have been reset.
Read for 8 seconds to inform recommendations.Reading history & counting settings
Based on Capcom's October 22 announcement. The total is worldwide, not Japan alone. This article does not establish a causal link to the PHP vulnerabilities.
The affected count differs by information type
Email addresses and system data such as account creation dates were exposed in 11,774,247 records. Of those, 43 also included birth date, gender, country or region and nickname. Another 196 within the total had unauthorized password changes. Capcom said it had not confirmed exposure of passwords originally set by users.
Individual notices are being sent; games remain available
Capcom said it found suspicious activity and blocked access on October 19, then reported to police and the Personal Information Protection Commission on October 21. By the October 22 announcement, emergency measures were complete and individual notifications were underway. Credit-card information was excluded from the leak, and game play was unaffected. The company warned about suspicious emails.

Sources & further reading
Our own summary based on the public information below.
- カプコン:不正アクセスによるお客様情報漏えいのお詫びとお知らせ ↗Source publication date: 2026-10-22
- INTERNET Watch:CAPCOM IDの情報漏えいとパスワード不正変更 ↗Source publication date: 2026-10-22
This is a record of information available at publication. Later reports may change the details. Check the source for current weather, safety and market information.


