Crunchyroll Breach Exposes Millions of User Support Data
The popular anime streaming service Crunchyroll has been implicated in a significant data breach, with reports indicating that approximately 1.2 million accounts were compromised. While an initial claim suggested 6.8 million users might be affected, the most concrete evidence points to a subset of data impacting around 1.2 million users. The exposed information reportedly originated from Crunchyroll’s Zendesk support system. This sensitive data includes user names, login credentials, email addresses, IP addresses, general geographic locations, and potentially the content of support tickets submitted by users.
The breach, which allegedly occurred in March 2026, has raised concerns about the security practices surrounding customer support platforms. The accessibility of such detailed information, including personal identifiers and communication logs, presents a considerable risk for affected individuals. A portion of the compromised data, specifically email addresses, was later made available to services like Have I Been Pwned (HIBP), allowing users to check their exposure.
What This Means For You
- Security teams should review and enhance the security configurations of third-party support systems like Zendesk, ensuring that access controls are strictly enforced and that sensitive customer data is adequately protected, especially when it includes communication logs and personal identifiers.
Found this interesting? Follow us on LinkedIn to stay ahead.