Capcom's CAPCOM ID breach exposed 11.7 Million records.
The part that stands out: 196 accounts had their passwords changed without authorization.
Exposed data includes email addresses, IP addresses, last-login timestamps and login counts.
Capcom says credit card data wasn't involved. It has not confirmed that users' original passwords were compromised.
The bigger concern is what attackers can do with millions of real account records: targeted phishing, account takeover attempts and cross-platform profiling.
The root cause remains unconfirmed. IDOR, session abuse and account recovery flaws are possibilities, not established findings.
Technical breakdown 👇
https://thecybersecguru.com/news/capcom-id-breach-2026/
Content warning: Capcom confirmed a CAPCOM ID breach exposing 11.8M records and 196 unauthorized password changes. What leaked, how it may have happened, and what to do
The CyberSec GuruCAPCOM ID Breach: 11.7M Exposed, 196 Passwords Changed | The CyberSec GuruCapcom confirmed a CAPCOM ID breach exposing 11.7M records and 196 unauthorized password changes. What leaked, how it may have happened, and what to do