Crunchyroll Investigates Data Breach After Hacker Claims Theft of 6.8 Million User Records Crunchyroll, the popular anime streaming platform, is investigating a potential data breach after a hacker claimed to have stolen the personal information of 6.8 million users. The incident came to light when the threat actor, identified as Sp1d3r, posted samples of the allegedly stolen data on a hacking forum, including usernames, email addresses, and hashed passwords. The breach reportedly occurred in early February 2026, though Crunchyroll has not confirmed the exact timeline or the full scope of the compromised data. The company acknowledged the claims in a statement, stating that it is working with cybersecurity experts to assess the situation and determine the validity of the hacker’s assertions. While the exposed data appears limited to account credentials, security researchers warn that hashed passwords if cracked could enable further attacks, such as credential stuffing or phishing campaigns. Crunchyroll has not disclosed whether payment information or other sensitive details were accessed. The incident follows a growing trend of cyberattacks targeting streaming services, with threat actors increasingly exploiting vulnerabilities in user databases for financial gain or notoriety. As of now, Crunchyroll has not issued a mandatory password reset but continues to monitor the situation closely. Further updates are expected as the investigation progresses.

Crunchyroll Suffers Major Data Breach: 100 GB of PII Exfiltrated A threat actor claims to have stolen approximately 100 GB of personally identifiable information (PII) from Crunchyroll, the Sony-owned anime streaming platform, following a breach on March 12, 2026. The attack reportedly originated from a compromised employee account at Telus, Crunchyroll’s outsourcing partner, which provided the attacker with initial access to the company’s internal systems. Once inside, the threat actor conducted lateral movement, infiltrating sensitive customer-facing infrastructure, including Crunchyroll’s ticketing systems. As of this report, Crunchyroll has not publicly confirmed the breach, leaving the full scope and impact of the incident unclear. The exfiltrated data’s nature and potential exposure of user details remain unconfirmed.

Crunchyroll Data Breach Exposes 1.2 Million Email Addresses via Zendesk Crunchyroll, the popular anime streaming platform, experienced a data breach last month after attackers compromised its Zendesk support system. The incident exposed 1.2 million unique email addresses, which were later shared with the breach notification service Have I Been Pwned (HIBP). According to reports, 82% of the leaked emails were already publicly associated with LinkedIn profiles, raising concerns about potential secondary targeting by threat actors. The breach highlights vulnerabilities in third-party support systems, which are increasingly exploited as entry points for cyberattacks. No further details on the attack vector or additional compromised data have been disclosed. The incident underscores the risks of supply chain exposures in customer support platforms.

Crunchyroll Investigates Alleged Data Breach Impacting 6.8 Million Users Earlier this week, reports emerged that threat actors had stolen data belonging to approximately 6.8 million Crunchyroll users nearly half of the company’s 15 million global user base. The claims surfaced after a hacker contacted BleepingComputer last week, prompting Crunchyroll to launch an investigation into the alleged breach. In a statement, Crunchyroll confirmed it was working with cybersecurity experts to assess the incident. The company later clarified that the exposed data primarily involved customer service ticket information linked to a third-party vendor. While no evidence of ongoing unauthorized access was found, the investigation remains active. According to the threat actors, the breach occurred after they compromised the Okta single sign-on (SSO) account of a Crunchyroll support agent employed by Telus International, a business process outsourcing firm with access to Crunchyroll’s support tickets. The attackers claimed to have deployed malware on the agent’s device, stealing credentials that granted access to multiple platforms, including Google Workspace Mail, Jiro Service Management, Slack, Mixpanel, MaestroQA, Wizer, and Zendesk. Using Zendesk access, the hackers reportedly downloaded 8 million support tickets, which contained 6.8 million unique email addresses, along with usernames, login names, geographic locations, IP addresses, and ticket contents. While some reports suggested credit card exposure, the leaked financial data was limited primarily partial card details (expiration dates and last four digits), with only a small number of full card numbers included. All affected tickets were linked to Telus, supporting the attackers’ claims. The threat actors stated their access was revoked after 24 hours, meaning the stolen data is current up to mid-2025. They also claimed to have sent a $5 million extortion demand to Crunchyroll, though the company has not responded. The breach appears unrelated to a recent alleged attack on Telus Digital by the hacking group ShinyHunters, and the identity of the Crunchyroll attackers remains unknown.

Crunchyroll Confirms Data Breach via Third-Party Vendor, Exposing Support Ticket Information Crunchyroll, the anime streaming platform owned by Sony Pictures Entertainment and Aniplex, has acknowledged a data breach involving customer service ticket records after a threat actor publicly claimed unauthorized access to user data and internal systems. The incident, linked to a third-party vendor handling support tickets, is under investigation to determine its full scope and impact. With over 15 million subscribers and a library of 2,000+ titles, Crunchyroll’s breach raises concerns about the potential misuse of exposed data, particularly for targeted phishing scams. While the company has not disclosed the number of affected records or specific data fields involved, it confirmed that notifications will comply with legal and contractual obligations. The hacker, who spoke to BleepingComputer, alleged access to approximately eight million support ticket records, including 6.8 million unique email addresses claims that remain unverified. The attacker reportedly gained entry through a compromised Okta single sign-on (SSO) account belonging to a support agent, a method increasingly used in identity-based breaches. Support ticket systems may contain sensitive details such as names, email addresses, subscription information, IP addresses, and message content, which could be leveraged for fraudulent account recovery or phishing attacks. This breach follows a pattern of identity and third-party vulnerabilities, with Okta itself experiencing a similar incident in 2023. According to Verizon’s 2023 Data Breach Investigations Report, 74% of breaches involve human factors, often through stolen credentials. IBM’s 2024 Cost of a Data Breach Report estimates the global average breach cost at $4.88 million, underscoring the financial and regulatory risks for multinational platforms like Crunchyroll, which operates under GDPR and state privacy laws. As the investigation continues, key questions remain, including the final record count, the vendor’s identity, and whether additional sensitive data such as credentials or payment details was exposed. Further disclosures are expected as forensic analysis progresses and regulators engage.