Crunchyroll is currently working with “leading cybersecurity experts” to investigate a possible data breach. We have the details for you.
Evidence of cyber attack
The streaming service Crunchyroll is once again the focus of negative headlines, because in addition to a class action lawsuit over data protection that the world’s leading anime platform has been facing for several weeks, the next uproar is now following.
On March 23, 2026, the X-Account International Cyber Digest stated in a post that has now been viewed over 5.3 million times that it had received concrete evidence that an attacker had stolen over 100 GB of Crunchyroll user data. As evidence, he added screenshots and explained the process.
An employee of the Indian outsourcing partner Telus is said to have executed malware on his computer. This gave a third party access to Crunchyroll’s systems – particularly the ticket system – and obtained data such as email addresses, IP addresses and payment information.
Investigations are ongoing
Although the incident is said to have occurred on March 12, 2026, it was only made public eleven days later. Crunchyroll immediately responded to the allegations and confirmed to multiple media outlets that it was investigating the matter.
When asked by Anime News Network, the streaming provider issued the following statement on March 24, 2026:
»Our investigations are ongoing and we continue to work with leading cybersecurity experts. At this time, we assume that the information is primarily limited to customer service ticket data that is affected following an incident with a third-party provider. We have found no evidence of ongoing access to systems related to these claims. We continue to monitor the situation closely.”
We will of course keep you up to date on all developments as usual. Until then, we advise all readers to change their passwords and not use the same login details for different platforms.
More on the topic:
Via X, ANN
© Crunchyroll, LLC