Story perspectives

Capcom ID Breach Exposes 11.8M Emails Worldwide

By Drooid · Oct 22, 2026, 6:19 PM UTC · How we work

Summary

Story summary

Capcom disclosed a breach of its CAPCOM ID service that exposed 11,774,247 email addresses worldwide.
Unauthorized access was detected on October 19, 2026 and blocked the same day.
Capcom created an internal response team on October 20, 2026.
Capcom reported the breach to Osaka police and Japan’s Personal Information Protection Commission on October 21, 2026.
No credit-card data were leaked and passwords were not exposed, though 196 accounts had passwords changed without authorization.

History

Historical Context

In December 2013, Target discovered a massive data breach caused by BlackPOS malware, the same tool later linked to Neiman Marcus’s July-2013 POS infection that exposed about 1.1 million credit and debit cards. The incidents revealed how Windows-based POS systems could be silently compromised during business hours, prompting regulators and retailers to tighten security standards and adopt more aggressive network monitoring.

1 of 2

Story summary

Capcom disclosed a breach of its CAPCOM ID service that exposed 11,774,247 email addresses worldwide.
Unauthorized access was detected on October 19, 2026 and blocked the same day.
Capcom created an internal response team on October 20, 2026.
Capcom reported the breach to Osaka police and Japan’s Personal Information Protection Commission on October 21, 2026.
No credit-card data were leaked and passwords were not exposed, though 196 accounts had passwords changed without authorization.

1 / 2