Capcom Reveals Data Breach Affecting More Than 11 Million Users

On Tuesday, Capcom disclosed that a security breach had compromised the personal information of about 11.7 million registered users, confirming an intrusion that started earlier this year and was detected through routine monitoring.

According to the firm, the attack gave perpetrators access to account details associated with its Capcom ID system. Although the compromised login credentials still work, the leak has triggered an increase in phishing emails that seem to come from Capcom, urging users to stay alert.

Security analysts point out that stolen email addresses and usernames are frequently used in targeted fraud schemes, typically coaxing recipients into clicking harmful links or divulging more personal data. Capcom has advised every account holder to examine recent messages, steer clear of unsolicited links, and think about changing passwords, particularly if the same login details are employed elsewhere.

In recent years, the video‑game industry has experienced an uptick in high‑profile data breaches, with companies like CD Projekt and Nintendo confronting comparable issues. Such events highlight how appealing gaming accounts have become to cyber‑criminals, who can profit from the stolen information via account‑takeover services or by selling it on illicit markets.

Capcom responded by hiring independent forensic investigators, strengthening its authentication processes, and planning to introduce further security enhancements in the upcoming weeks. The company also noted that it is working with appropriate authorities to evaluate the breach’s full extent.

Regulators across multiple regions could examine the incident under new data‑protection regulations, which might result in penalties or required corrective measures. In the meantime, users should keep an eye on their accounts for any irregular activity and enable any offered two‑factor authentication to bolster security.