Crunchyroll Data Breach - Hacker Claims Unauthorized Access
Basically, a hacker says they accessed Crunchyroll's user data and the company is looking into it.
Crunchyroll confirmed a data breach after a hacker claimed unauthorized access to user data. Millions of subscribers may be affected. The company is investigating the incident.
What Happened
Crunchyroll, the popular anime streaming service, has confirmed a data breach involving customer information. This incident arose after a hacker claimed to have accessed user data through a third-party vendor. Reports indicate that the hacker might have infiltrated Crunchyroll’s systems by compromising an employee's account at Telus Digital, the outsourcing company handling their customer support.
The hacker alleged they gained access to Crunchyroll's Zendesk support system, which contains sensitive information about users. The breach reportedly occurred on March 12, 2025, and the hacker claimed to have downloaded around eight million support ticket records, including approximately 6.8 million unique email addresses. Crunchyroll is currently investigating these claims and working with cybersecurity experts to assess the situation.
Who's Affected
The breach potentially impacts 15 million subscribers worldwide who use Crunchyroll's services. With over 2,000 titles available in multiple languages, the platform has a vast user base. The leaked data could pose significant risks, including phishing attempts and identity theft for those affected.
While Crunchyroll has not confirmed the full extent of the data compromised, the hacker's claims suggest that many users' personal information is at risk. The company has stated that it has not found evidence of ongoing unauthorized access but is continuing its investigation.
What Data Was Exposed
The hacker claims to have accessed sensitive customer support ticket information, which may include:
- User email addresses
- Support inquiries and resolutions
- Internal communications related to customer support
These details could be exploited for various malicious activities, such as targeted phishing attacks. The exposure of 6.8 million email addresses alone is alarming, as it can lead to further breaches of privacy and security for users.
What You Should Do
If you are a Crunchyroll user, it is essential to take proactive steps to protect your personal information. Here are some recommended actions:
- Change your password: If you use the same password on multiple sites, update them immediately.
- Enable two-factor authentication: This adds an extra layer of security to your account.
- Monitor your accounts: Keep an eye on your email and financial accounts for any suspicious activity.
Stay informed about the ongoing investigation and follow any updates from Crunchyroll. Being proactive can help mitigate the risks associated with this breach.
TechCrunch Security