Capcom says an outside party got into 11,774,247 Capcom ID accounts. Expect scam emails that use the exposed details, so be careful what you click.
Capcom has confirmed a data breach that touched more than 11.7 million Capcom ID accounts. A Capcom ID is the online membership account many players use for games like Street Fighter, Resident Evil and Monster Hunter. The company says an outside party got in without permission. If you have one of these accounts, the main risk now is scam messages.
Capcom says it first noticed suspicious activity on Capcom IDs on Oct. 19. It began blocking access and opened an investigation. The company posted a public notice on Thursday and apologized for the concern it caused. Its count of affected accounts is 11,774,247. The investigation is still going.
For all of the affected accounts, the exposed details include email address records, when the account was created, the total number of logins, the date and time of the last login, and the IP address used for that last login. An IP address is a number that identifies the internet connection a device used.
A small group faced more exposure. Capcom says 43 accounts also had their date of birth, gender, country or region, and nickname affected. Another 196 accounts had their login password changed by the intruder. Capcom says it has already reset the passwords on those 196 accounts.
Capcom says it has found no evidence that the passwords users originally chose were leaked. It also says its games do not appear to have been affected. If you have never made a Capcom ID, this breach does not involve you. These are Capcom's own findings, and the company has not said its investigation is finished.
Capcom warns that criminals may send phishing emails that use data from the breach. Phishing means fake messages built to trick you into clicking a link or opening a file. An email that knows your address and looks like it comes from Capcom may seem real. Capcom's advice is to be cautious with any suspicious email or message, avoid links inside it, and not open attached files.
The alert above lists the steps to take. The key habit is simple: if a message about Capcom or your account arrives unexpectedly, go to the official site yourself instead of using anything in the message.
Capcom has not said in the material available how the intruder got in. More details may come as the investigation continues.
If you have a Capcom ID, treat any unexpected Capcom email as suspect and never click its links or open its attachments.
A user says Anthropic's Claude Code put his email in web requests, then scam messages arrived. The link is unproven, but it shows what AI tools can share.
Read more: User says Claude Code sent his email address to websitesA viral ChatGPT prompt turns what the chatbot remembers about you into a room image. Posting it publicly could give scammers clues to target you.
Read more: Viral ChatGPT room image could hand scammers clues about youA message saying your Amazon account was hacked is often the scam itself. Checking in the Amazon app first can protect your card, gift balance and phone.
Read more: If Amazon says your account was hacked, check before you call
