11 Million Impacted by Capcom Data Breach
Capcom data breach impacts 11 million CAPCOM ID users with stolen email addresses.
Run Capcom?
Get an email when a reviewed story names Capcom, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
Summary
Capcom has disclosed a data breach affecting over 11 million CAPCOM ID users. Hackers gained unauthorized access and stole email addresses, account creation dates, login history, and IP addresses. For a smaller subset of users, dates of birth, gender, country, and nicknames were also compromised. While no passwords were stolen, 196 accounts had their passwords reset by the attackers.
The lesson from this incident
Full lessonAttackers gained unauthorized access to Capcom's systems and exfiltrated personal data belonging to over 11 million users, including email addresses, IP addresses, and login histories. The breach is particularly concerning because attackers were able to actively reset passwords for 196 accounts, indicating a significant level of system access beyond simple data exfiltration. This incident highlights the critical importance of robust access controls, data minimization practices, and timely detection of unauthorized activity. When large volumes of personal data are aggregated without sufficient protection, a single breach can have widespread consequences for millions of individuals.
What helps against this
How we list vendors- Identity governance and single sign-on
People who leave or change roles lose access everywhere at once, and forgotten accounts stop piling up.
- Encryption and key management
Stolen data stays unreadable, and the keys stay under your control.
- Incident response retainer
Experts are on call before the worst day, not searched for during it.
Indicators of Compromise
- ip — 196