logo

Crunchyroll Data Breach — Threat Actor Claims Exfiltration of 100 GB of User Data

ID: bf94e2b8-456c-5e92-bab3-9129b35cadd4

STIX ID: report--bf94e2b8-456c-5e92-bab3-9129b35cadd4

Feed Name: cybersecurityNews.com

Threat Score
75/100

Date Published: 2026-03-23

Date Updated: 2026-04-21

Author: Guru Baran

...
...

Alleged Crunchyroll breach via BPO compromise: a threat actor claims to have exfiltrated ~100 GB of customer PII (including IPs, emails, credit card details, and analytics data) after an employee at outsourcing partner Telus executed malware, enabling lateral movement into Crunchyroll ticketing and analytics systems; Cyber Digest analyzed a provided sample, the attacker says access was revoked ~24 hours after the intrusion, and Crunchyroll has not publicly responded.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.