Arista VeloCloud Orchestrator · Data breach
Capcom Data Breach Exposes 11.7 Million Email Addresses
At a glance
Low rather than Medium: UK relevance is 40 of 100, little UK-specific signal so far.
Briefing
- Do not treat uncorroborated claims as confirmed breaches.
Questions to ask IT
- Do we use Arista VeloCloud Orchestrator, and has anything unusual been seen on it?
- Would our monitoring spot an attack like this, and who would we call if it did?
Next steps
- Confirm whether this affects systems or suppliers in your estate
No technical write-up beyond the summary below yet.
Next steps
- Check whether the affected organisation or service is in your estate or supply chain, and follow its guidance
Summary
- Capcom Data Breach Exposes 11.7 Million Email Addresses Security Affairs Cybersecurity and Infrastructure Security Agency (CISA) adds Arista VeloCloud Orchestrator flaw to its known-exploited catalogue. A New Mexico judge ordered Meta to pay $25 billion for misleading users about privacy, setting a record penalty.
Read the original reportSecurity Affairs(opens in a new tab)
Products and services involved
- Arista VeloCloud Orchestrator98% match confidence
Pulse
Last checked yesterday · Recheck overdue since 11 Nov 2026, 11:04 UK time · 3 quiet checks collapsed
- Story24 Oct 2026, 14:18 UK time · 24 Oct
Linked reporting from Security Affairs (independent original reporter).
Read source (Security Affairs)
1 entry so far. The timeline chart appears once this story has more history.
Sources
- Security AffairsNews
Capcom Data Breach Exposes 11.7 Million Email Addresses
How we know
Statements extracted from sources. Higher confidence means stronger corroboration.
- ClaimedHeadline60% confidence
Capcom Data Breach Exposes 11.7 Million Email Addresses
- ProbableSummary fact75% confidence
Capcom Data Breach Exposes 11.7 Million Email Addresses Security Affairs Cybersecurity and Infrastructure Security Agency (CISA) adds Arista VeloCloud Orchestrator flaw to its known-exploited catalogue. A New Mexico judge ordered Meta to pay $25 billion for misleading users about privacy, setting a record penalty.

