Crunchyroll Data Breach Allegedly Exposes 100 GB of User Data

A reported March 12, 2026 supply-chain breach of Crunchyroll via a compromised Telus BPO employee resulted in the alleged theft of ~100 GB of customer PII (account emails, IP addresses, credit card details, and internal analytics). Attackers executed malware on a Telus workstation, moved laterally into Crunchyroll’s ticketing and analytics systems to exfiltrate data; Crunchyroll reportedly detected and revoked access within 24 hours but has not publicly disclosed the incident.