11.7 million Capcom accounts breached in large-scale hack as players are warned of possible fraudulent emails

Leon S Kennedy from Resident Evil next to Capcom logo

Published:

Last Updated: 22 October 2026

By:

Capcom has confirmed that over 11.7 million Capcom ID accounts have been leaked in a recent online data breach.

Announced in a recent statement, Capcom confirmed that the email address connected to 11,774,247 Capcom IDs have been leaked. The IDs are used for rewards, online multiplayer, and other features in games such as Resident Evil, Monster Hunter, Street Fighter and more.

At the time of writing, Capcom has confirmed that the stolen information largely consists of email addresses with no financial information compromised. Out of the 11,774,247 accounts, there were 43 instances of data of birth, gender, country, and region information compromised.

Additionally, during the hack, Capcom noticed 196 instances of unauthorised password changes, but it’s not known if the original passwords have been captured as well. Capcom has also reset all affected passwords by default to protect users as well.

The Japanese gaming giant explains that it discovered the intiial signs of a breach on October 19, 2026. During this time, Capcom formed an internal team to block hackers from accessing additional information.

Capcom has also reported the large-scale data breach to the authorities and tracked every account that has been compromised. While the data breach is large in scale, the company announced that no Capcom online services have been affected, and players should be able to play their games without issue.

Despite Capcom’s quick response to the data hack, the company warns players that any captured information could be misused by the currently unknown hackers. While the studio is keen to note that no financial information has been captured, those with affected email addressed could be met with faux Capcom email or other fradulent messages.

“There is a possibility that the affected information could be misused to send fraudulent emails or other communications impersonating Capcom or related parties,” the company stated. “If you receive any suspicious email or message, please exercise caution and refrain from accessing any URLs contained therein or opening any attached files.”