Crunchyroll Investigates Data Breach Affecting 6.8M Users

Crunchyroll is investigating a data breach after hackers claimed to have stolen personal information of approximately 6.8 million users. The breach reportedly occurred on March 12, 2026, when a threat actor accessed the Okta SSO account of a support agent from Telus, Crunchyroll's outsourcing partner. The attackers allegedly used malware to compromise the agent's computer, allowing them to access various Crunchyroll applications and download 8 million support ticket records. The stolen data includes names, email addresses, IP addresses, and some credit card details. Although Crunchyroll has acknowledged the claims, they indicated that the hackers might be exaggerating the extent of the breach. The threat actor has demanded $5 million in ransom to prevent public leakage of the data. Crunchyroll is currently collaborating with cybersecurity experts to assess the situation. The incident raises concerns about the security of business process outsourcing companies, which have become attractive targets for cybercriminals.

Key Points: • Hackers claim to have stolen data from 6.8 million Crunchyroll users. • The breach was facilitated through a compromised Telus employee's account. • Crunchyroll is investigating the incident while downplaying the hackers' claims.