Breaches and incidentsBriefReported by a reputable outlet, citing the company
Crunchyroll: support-ticket data stolen through an outsourced Telus agent’s Okta login
Crunchyroll confirmed the leaked data is legitimate and “primarily limited to customer service ticket data” tied to an incident at a third-party vendor...
- Disclosed
What happened
- Crunchyroll confirmed the leaked data is legitimate and “primarily limited to customer service ticket data” tied to an incident at a third-party vendor, adding “We have not identified evidence of ongoing access to systems.” The hacker claims about 8 million support tickets (about 6.8 million people, about 100GB) from Crunchyroll’s Zendesk, with IP and email addresses and, in some tickets, partial card data.
- Initial access as claimed by the hacker: malware on a Telus outsourced support agent’s device, then that agent’s Okta SSO credentials, giving access to Zendesk, Slack and Google Workspace for about 24 hours from 12 Mar 2026. Crunchyroll confirmed only “a third-party vendor” incident.
- Unnamed hacker; Telus told BleepingComputer its separate ShinyHunters breach is believed unrelated.
- The hacker says a $5 million demand went unanswered.
Sources
- https://therecord.media/crunchyroll-hacker-anime-data-theft
- https://securitymagazine.com/articles/102195-hackers-claim-to-have-breached-streaming-service-crunchyrolls-data
This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.