Crunchyroll data breach exposes millions of customer emails
Crunchyroll data breach exposes millions of customer emails
Hackers appear to have gained entry to the streamer via a third-party support company.
Crunchyroll’s cybersecurity department is working overtime this week. The anime streaming service is reportedly grappling with a data breach that has affected millions of customers, and is attempting to assuage nervous users that their most important personal details are still safe.
Key Details:
- Data breach: A hacker has claimed to have accessed customer information for nearly 7 million Crunchyroll customers.
- Limited exposure: Thus far, it appears customer credit card details have not been exposed widely.
- Breach sealed?: Crunchyroll says it has not detected any ongoing access to the compromised systems by malicious actors.
Earlier in March, a threat actor contacted Bleeping Computer to inform the site that they had gained access to the account of an employee of a support agent who works with Crunchyroll. With this employee’s credentials, the hacker was able to gain access to various applications used by the anime streamer.
The hacker said that they had downloaded 8 million support ticket records from Crunchyroll, which include 6.8 million unique email addresses. They were also able to access user login credentials, IP addresses, general geographic locations, and the contents of their support ticket.
Somewhat comforting to users, Bleeping Computer was able to report that credit card details were not widely exposed in the breach; only customers whose card numbers were shared in support tickets were exposed. The hacker said that their access was revoked after 24 hours, and Crunchyroll has informed customers that, thus far, it has not detected any ongoing unauthorized access to their systems.
“Our investigation is ongoing, and we continue to work with leading cybersecurity experts,” the streamer said in a statement. “At this time, we believe that the information is primarily limited to customer service ticket data following an incident with a third-party vendor. We have not identified evidence of ongoing access to systems in relation to these claims. We are continuing to monitor the situation closely.”
If you suspect your information was compromised in the Crunchyroll data breach, the wisest course of action would be to change the login credentials associated with your account. Continue to monitor your email and the card you subscribe to Crunchyroll with, especially if you’ve made a support ticket with the company that included your payment details. The hacker claims to have accessed data up to mid-2025 before they were shut out of the system, so unfortunately, longtime users of the service are some of the most vulnerable.
Crunchyroll
Crunchyroll is a subscription video streaming service catering to fans of anime with over 30,000 episodes. Viewers can see new episodes of shows one hour after they air in Japan, and read hundreds of chapters across dozens of manga titles. Some of their more popular titles are Dragon Ball Super, Attack on Titan, and Fire Force.