Capcom warns Middle East players of phishing risks after data breach affecting 11 million accounts

Published:

Capcom has reported a significant data breach affecting its online membership service, impacting over 11 million customer accounts globally, including those in the Middle East. The breach, which occurred on October 19, has prompted the company to issue warnings about potential phishing attempts targeting affected users.

The compromised data includes email addresses, account creation dates, last login times, and IP addresses used during the last login. Notably, while 43 records contained sensitive information such as date of birth and gender, Capcom confirmed that passwords created by users were not leaked, and no credit card information was involved. However, 196 accounts experienced unauthorized password changes, which Capcom has already reset as part of its response to the incident.

Impact on Middle East Players

Middle East players who utilize Capcom ID to access online services may be among those affected, although Capcom has not provided a regional breakdown of the breach. The company has advised users to be vigilant regarding unexpected emails referencing their Capcom ID, urging them to check their accounts for any unfamiliar activity. “If you receive any suspicious email or message, please exercise caution and refrain from accessing any URLs contained therein or opening any attached files,” Capcom stated.

Company Response and Investigation

In response to the breach, Capcom has reported the incident to the Osaka Prefectural Police and Japan’s Personal Information Protection Commission. The company has implemented emergency measures and claims to have identified and addressed the attack method involved. Capcom is conducting a detailed investigation to assess the full scope of the breach and plans to enhance its information security framework to prevent future incidents.

Capcom has expressed its commitment to transparency, stating that it will provide updates through its official channels as new information becomes available. The company has also apologized to its customers and stakeholders for the distress caused by the breach.

As the gaming community in the Middle East remains on alert, this incident underscores the importance of cybersecurity vigilance, particularly in the face of increasing phishing threats following data breaches. For further details on the breach, refer to the report by Tbreak.

CHAPTER X // CYBER AWARENESS CAMPAIGN
BEYOND THE BALLROOM
[C://ME] // CHAPTER X

REQUEST THE MEDIA KIT

Tell us where to send the Beyond the Ballroom media deck. Every field is required.

We will use these details to respond to your media-kit request. Privacy Policy

Cyber Warriors Conclave Chapter X — Beyond the Ballroom

Related articles

Recent articles

Compromised LiteLLM 1.107.0 package leads to widespread credential theft via Python startup hooks

On October 21, 2026, a compromised version of the LiteLLM 1.107.0 package was uploaded to the Python Package Index (PyPI), leading to significant credential...

FCC bans devices with surveillance chips from Huawei subsidiary HiSilicon

The Federal Communications Commission (FCC) has enacted a ban on two devices equipped with surveillance chips produced by HiSilicon, a subsidiary of the Chinese...

General Dynamics Information Technology appoints Amy Johnson as president to enhance cybersecurity leadership

General Dynamics Information Technology (GDIT) has appointed Amy Johnson as its new president, effective November 3. This leadership change comes as GDIT aims to...

Arista Networks VeloCloud Orchestrator vulnerable to CVE-2026-114625, exploited in the wild

Arista Networks has reported a critical vulnerability, CVE-2026-114625, affecting its VeloCloud Orchestrator (VCO) products, with confirmed exploitation in the wild as of October 22,...