Capcom Confirms CAPCOM ID Breach: Player Data Exposed and 196 Accounts Had Passwords Changed

Capcom, the company behind Resident Evil, Street Fighter and Monster Hunter, has warned that players' personal information may have been compromised. In a notice published on October 22, it said customer information linked to CAPCOM ID was accessed by an unauthorised third party. CAPCOM ID is the unified account players use to play Capcom-licensed games online and to reach various web services.

Capcom detected suspicious activity in the CAPCOM ID system on October 19, 2026. It moved to block the access and began investigating, and later that day confirmed that unauthorised access had occurred. On October 20 it set up an internal incident response headquarters, and it has since reported the incident to its external Information Technology Security Oversight Committee. Capcom has not confirmed any compromise of passwords originally set by customers, but it observed unauthorised password changes on 196 accounts. Those passwords have been reset. Credit card information was not affected, and games and services that use CAPCOM ID remain available.

Capcom warned that the exposed information could be misused in fraudulent emails or other messages impersonating the company or related parties. It has urged customers to be cautious with suspicious messages and to avoid clicking links or opening attachments. The company says its investigation into the scope of the incident is continuing.