Capcom and Square Enix have reported separate attacks affecting online services and player information, amid a wider rise in breaches targeting Japanese companies. The incidents highlight why strong, unique account security matters for gamers and arcade fans using connected services.
Final Fantasy XIV accounts accessed using reused credentials
On 19 October, Square Enix confirmed that an unnamed third party had accessed a number of Final Fantasy XIV accounts.
The company said the incident did not result from a direct intrusion into Square Enix’s own databases or security systems. Instead, the attacker used login details obtained through breaches at other companies. Square Enix has blocked access to accounts it believes may have been affected and warned that wider password resets and additional security measures could follow if these attacks become more common.
Capcom confirms access to user information
Capcom reported a separate, direct breach involving databases and services that stored user information. The incident exposed system-identifying account information and email addresses belonging to more than 11.7 million users.
Capcom also said that user details including dates of birth, gender and location were accessed in at least 43 cases. Passwords were unlawfully changed on approximately 196 accounts. The breach took place on 19 October, and the vulnerability was fixed internally soon afterwards. Capcom investigated the cause and passed the relevant information to police.
Recent cybersecurity breaches affecting Japanese businesses show that these are not isolated events. The Japanese government is also looking into methods for addressing the growing number of incidents across different industries.
Why arcade and gaming accounts should use unique passwords
Breaches recorded in 2026 have already exceeded the total reported across the whole of the previous year, with many incidents involving AI-powered systems. For players who follow arcade and gaming news, the incidents are a timely reminder that modern games and services can carry the same account-security risks as any other online platform.
Do not reuse passwords between services, and change them at sensible intervals. Where available, enable two-factor authentication. These steps can help prevent credentials stolen from one company being used to access accounts held elsewhere.
Players managing connected setups can also explore our arcade machine buying guide or browse arcade parts for offline hardware projects that do not depend on the same online account ecosystem.
Leave a Reply