Zero Radar
← feed
HighData breachupdated 25 Oct 2026, 13:37 UTC

Capcom ID breach exposes millions of customer email addresses

Hackers got into Capcom's account system and copied millions of customer email addresses. They also changed the passwords on some accounts, so affected players may be locked out.

Attacks reported (SecurityWeek)2 independent sources
SeverityHighData breach
Being exploited?ReportedBy SecurityWeek, not officially confirmed yet
What to doCheck exposureChange your CAPCOM ID password and avoid clicking login links in unexpected emails.
How sure is this?2 independent sourcesSeveral independent publishers agree

How the attack works simplified

  1. 1Attacker breaches systemGained access to CAPCOM ID membership service
  2. 2Customer data copiedEmail addresses and associated information taken
  3. 3Passwords changedLogin passwords changed on 196 accounts
  4. ResultCustomer emails and some accounts compromised

What happened

Attackers breached Capcom's membership service CAPCOM ID, stealing email addresses and associated information for about 11 million accounts and changing login passwords on 196 accounts.

Why it is dangerous: Stolen email addresses can be used for phishing and account takeover attempts, and people with changed passwords may lose access to their accounts.

Are you affected?

You are affected if you have a CAPCOM ID account.

CAPCOM ID membership service accounts (about 11.7 million affected per BleepingComputer; 11 million email addresses per SecurityWeek).

What to do

  1. Reset your CAPCOM ID password, using a unique password you do not use elsewhere
  2. Turn on two-factor authentication if CAPCOM ID offers it
  3. Be wary of unexpected emails asking you to log in or verify your account

Timeline

  1. 22 Oct 2026, 20:22 UTC
    Publicly disclosed
  2. 22 Oct 2026, 20:22 UTC
    Reported by BleepingComputer · BleepingComputer
  3. 23 Oct 2026, 08:34 UTC
    Reported by SecurityWeek · SecurityWeek

Sources 2 reports, oldest first

Security press established security newsrooms

Technical details

ID
ZR-962b5311 · ZR-177124c9
Disclosed
22 Oct 2026, 20:22 UTC
On Zero Radar
before the radar started
Last change
25 Oct 2026, 13:37 UTC

The plain-language parts and the attack diagram were written by an AI model (anthropic/claude-haiku-5.5) from the sources above. Facts like versions, exploitation and dates come from the sources themselves. How Zero Radar works

Capcom ID breach exposes millions of customer email addresses · Zero Radar