Breachesby GlyphCrunchyroll
Disclosed Mar 23, 20261,195,684 accountsUnverified
Crunchyroll support tickets stolen via BPO agent's Okta account
Crunchyroll investigated and later confirmed a breach after a hacker claimed 8 million Zendesk support tickets with 6.8 million unique emails, taken using a Telus BPO employee's Okta credentials stolen by malware. The attacker demanded $5 million.
What is known
| People affected | 1,195,684 (accounts in the leaked data, per Have I Been Pwned) |
|---|---|
| Disclosed | Mar 23, 2026 |
| Happened | Mar 12, 2026 |
| Attack | Vendor breach |
| Data exposed | EmailsNamesIP addressesLocationMessagesPayment cards |
| Sector | Media · US |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
| Check your email | Have I Been Pwned |
Sources
Notices filed
History of this record
aggregator to pressby seedSource
https://haveibeenpwned.com/Breach/Crunchyroll to https://www.bleepingcomputer.com/news/security/crunchyroll-probes-breach-after-hacker-claims-to-steal-68m-users-data/by seedSource
empty to USby seedSource
tech to mediaby seedSource
unknown to third-partyby seedSource
["emails"] to ["emails","names","ip-addresses","location","messages","payment-card"]by seedSource
2026-04-04 to 2026-03-23by seedSource
In March 2026, the anime streaming service Crunchyroll suffered a data breach alleged to have impacted 6.8M users . The exposed data is reported to have originated from the company's Zendesk support system where "name, login name, email add to Crunchyroll investigated and later confirmed a breach after a hacker claimed 8 million Zendesk support tickets with 6.8 million unique emails, taken using a Telus BPO employee's Okta credentials stolen by malware. The attacker demanded $5 mby seedSource
empty to Crunchyroll support tickets stolen via BPO agent's Okta accountby seedSource
First recordedby backfillSource
First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.