1. News
  2. Alerts
  3. Capcom · Data breach
AlertCapcom · Data breach2 min read

Capcom breach exposes emails of 11.7 million game accounts

Capcom says an outsider got into Capcom ID and affected 11.7 million users. The main risk now is fake emails that pretend to be the company.

By the Dashline deskSource: Engadget
Capcom breach exposes emails of 11.7 million game accounts
Photo: Engadget
Act this week
What happenedAn outsider got unauthorized access to Capcom ID, the company's online account service, and affected more than 11.7 million users.
Who is affectedAnyone with a Capcom ID, including players of games like Street Fighter 6 that need it for online play.
What to do
  1. 1Do not click links in unexpected emails that claim to come from Capcom.
  2. 2Visit Capcom's website by typing the address yourself instead of using an email link.
  3. 3Change your Capcom ID password, and change it anywhere else you reused it.
  4. 4Turn on extra sign-in protection for your account if it is offered.

Capcom has confirmed that someone broke into Capcom ID, its online account service, and that more than 11.7 million users were affected. The biggest risk for most people is not stolen money. It is scam emails that look like they came from Capcom.

What happened

Capcom says it spotted suspicious activity on October 19 and blocked access right away. The unauthorized access had already happened by then. The company reported it to local police and its external advisory board for security oversight. Capcom says it found and fixed the attack method. Games that use Capcom ID, including Street Fighter 6 for online play, still work.

The leak included millions of account email addresses. For 43 accounts, birth date, gender, country or region and nickname were also taken. Passwords on 196 accounts were changed without permission.

Who can relax, and what to watch

Capcom says credit card information was not part of the breach. If you have never made a Capcom ID, this incident does not touch you. If you do have one, expect phishing, which means fake emails built to trick you into clicking a link or giving up details. Capcom warned that the leaked information could be used to impersonate it.

The steps in the alert box above cover what to do. The main idea is to treat any Capcom email with suspicion and go to the company's site on your own.

What is not known yet

Capcom has not said exactly how many email addresses were exposed beyond "millions." The reports so far also do not explain how the attacker got in or who was behind it.

The takeaway

If you have a Capcom ID, ignore links in Capcom emails and change your password, especially if you use it on other sites.

More articles

You should really read these.

Next step

Let’s talk