If you have an online gaming account with Resident Evil and Street Fighter developer Capcom, you should check your email. The Japanese company confirmed it suffered a serious security incident on its Capcom ID user platform, exposing information from nearly twelve million records worldwide.

Capcom detected suspicious activity on its servers last Monday and initiated an emergency protocol to block unauthorized access. Initial investigations revealed a third party compromised the database of its membership service, affecting 11,774,247 global records. Compromised data includes email addresses and system identifiers like account creation date, last login date, login count, and IP address.

Despite the large volume of exposed data, the cybersecurity team contained the worst damage. Of the affected accounts, the intrusion unauthorizedly changed passwords for 196 users and accessed personal data like birth date, gender, region, and nickname in 43 specific cases. The good news is Capcom hasn’t confirmed the original user-chosen passwords were leaked and has already reset access for compromised accounts. They also clarified that credit card information was not affected.

Due to the severity, Capcom took action. After forming an internal committee to assess the impact, they filed a formal complaint on Wednesday with the Osaka Prefectural Police and Japan’s Personal Information Protection Commission. The developer has set up dedicated customer support channels for this incident and will begin contacting affected users while implementing new security measures for its digital infrastructure.

Capcom is one of Japan’s most important and historic video game companies, founded in 1983. Over four decades, it has created legendary franchises that have marked multiple generations of gamers worldwide, including Street Fighter, Resident Evil, Monster Hunter, Ace Attorney, and Mega Man.

Do you have a Capcom ID account and plan to change your password just in case?