Crunchyroll
Disclosed Mar 23, 20266 months ago1,195,684 accountsUnverified
Crunchyroll support tickets stolen via BPO agent's Okta account
Crunchyroll investigated and later confirmed a breach after a hacker claimed 8 million Zendesk support tickets with 6.8 million unique emails, taken using a Telus BPO employee's Okta credentials stolen by malware. The attacker demanded $5 million.
What is known
| People affected | 1,195,684 (accounts in the leaked data, per Have I Been Pwned) |
|---|---|
| Disclosed | Mar 23, 2026 |
| Happened | Mar 12, 2026 |
| Attack | Vendor breach |
| Data exposed | Emails, Names, IP addresses, Location, Messages, Payment cards |
| Sector | Media · US |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
| Check your email | Have I Been Pwned |
Sources
| Source | |
|---|---|
| Have I Been Pwned: Crunchyrollhaveibeenpwned.com · Aggregator | Aggregator |
| Crunchyroll confirms data breach after hacker claims unauthorized accesstechcrunch.com · News | News |
| Crunchyroll probes breach after hacker claims to steal 6.8M users' datableepingcomputer.com · News | News |
Notices filed
| Where | Filed | People |
|---|---|---|
| Researchtotal | Mar 23 | |
| Have I Been Pwnedaccounts in the data | Apr 4 | 1,195,684 |
History of this record
- 2026-09-25 · source_type: aggregator to press · seed source
- 2026-09-25 · source_url: https://haveibeenpwned.com/Breach/Crunchyroll to https://www.bleepingcomputer.com/news/security/crunchyroll-probes-breach-after-hacker-claims-to-steal-68m-users-data/ · seed source
- 2026-09-25 · country: empty to US · seed source
- 2026-09-25 · sector: tech to media · seed source
- 2026-09-25 · attack: unknown to third-party · seed source
- 2026-09-25 · data_types: ["emails"] to ["emails","names","ip-addresses","location","messages","payment-card"] · seed source
- 2026-09-25 · disclosed: 2026-04-04 to 2026-03-23 · seed source
- 2026-09-25 · summary: In March 2026, the anime streaming service Crunchyroll suffered a data breach alleged to have impacted 6.8M users . The exposed data is reported to have originated from the company's Zendesk support system where "name, login name, email add to Crunchyroll investigated and later confirmed a breach after a hacker claimed 8 million Zendesk support tickets with 6.8 million unique emails, taken using a Telus BPO employee's Okta credentials stolen by malware. The attacker demanded $5 m · seed source
- 2026-09-25 · title: empty to Crunchyroll support tickets stolen via BPO agent's Okta account · seed source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.