Capcom ID breach exposes 11.7M account email addresses
Teaser from the source
Capcom says a third party gained unauthorized access to CAPCOM ID, the account needed to play some Capcom games online. 11,774,247 records worldwide had email addresses plus account creation time, last login time, login count and last-login IP exposed; 43 also had date of birth, gender, country/region and nickname. Passwords were changed without authorization on 196 accounts (already reset). Capcom says it has not confirmed any leak of customer-set passwords, and no credit card data was involved. Detected Oct 19; reported to Osaka Prefectural Police and Japan's PPC on Oct 21. Expect phishing impersonating Capcom.
This is the RSS-feed teaser. Read the full article at the original source.
Read at pwn.watchMore on addresses
Other advisories
- Not ratedosv:CLEANSTART-2024-YG47016usrsctp before 2019-12-20 has out-of-bounds reads in sctp_load_addresses_from_init
- Not ratedosv:CLEANSTART-2026-UD44303Parse function permits values other than IPv6 addresses to be included in square brackets within the host component of a URL
- Not ratedosv:CLEANSTART-2026-WJ36170Improper validation of source IP addresses in OpenVPN version 2
- Not ratedosv:CLEANSTART-2024-BU24068usrsctp before 2019-12-20 has out-of-bounds reads in sctp_load_addresses_from_init
- Not ratedosv:CLEANSTART-2024-DM92551Incorrect origin serialization of URLs with IPv6 addresses could lead to incorrect security checks
- Not ratedosv:CLEANSTART-2026-GG25659ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript
- Not ratedosv:CLEANSTART-2026-XX62588ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript
- Not ratedosv:CLEANSTART-2026-RH66685ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript
Other news entries
- Chainalysis discloses data breach from "offensive agentic techniques"NewsBleepingComputer
- b14g: about 97M CORE drained from its Core staking contracts; contracts pausedBreachpwn.watch
- Chainalysis says an attacker using agentic techniques accessed its systems; customer user names, emails and roles exposedBreachpwn.watch
- AO3 (Archive of Our Own) down for 2-4 weeks after security incident; user database theft not ruled outBreachpwn.watch
- Ireland's Employment Permits Portal taken offline after unauthorised activity; names, emails and roles may be exposedBreachpwn.watch
- "Icepick" leak exposes records on 41,000 DHS employees, including undercover ICE agentsBreachpwn.watch
- zkLink Nova's Ethereum bridge drained of about $786K through a forged batch rootBreachpwn.watch
- Cisco Expressway Series Security Hardening Release: October 2026NewsCisco PSIRT
Source: https://pwn.watch/i/capcom-id-breach-oct-2026