{"id":"crunchyroll-support-ticket-breach-mar-2026","category":"breach","status":"closed","title":"Crunchyroll support-system breach exposes customer tickets and identifying details","tldr":"Crunchyroll confirmed a third-party support incident. Samples exposed customer identities and ticket contents; HIBP received 1.2 million email addresses. Watch for convincing fake support messages and change any password shared in a ticket.","summary":"Crunchyroll customers whose information appeared in support tickets face exposure following a third-party support-system breach. Samples reviewed by BleepingComputer contained names, login names, email and IP addresses, approximate locations and ticket contents. It reported that exposed card details came from customers’ messages, rather than a separate payment-system breach. The attacker claimed eight million tickets covering 6.8 million unique email addresses; Crunchyroll has not confirmed those totals. The company told reporters that the information appeared mainly limited to customer-service tickets and that it had found no evidence of ongoing access while investigating. On 4 April, Have I Been Pwned added a subset containing 1.2 million email addresses. As of 3 November, the reviewed sources provide no final affected total, confirmed data recovery, completed notification programme or announced charges. No device update can remedy the disclosure.","action":"If you contacted Crunchyroll support, check your email address at Have I Been Pwned and treat unexpected support or billing messages cautiously: open Crunchyroll directly instead of following their links. Change any password you shared in a ticket or reused elsewhere. If you notice unfamiliar account activity, remove unknown devices through Account Settings → Device Management and contact Crunchyroll support.","product":"Crunchyroll customer support","audience":"home","severity":"high","patch":"na","exploited":true,"cves":[],"tags":["crunchyroll","data-breach","customer-support","personal-data","zendesk"],"affected":[],"fixed":[],"matches":[],"sources":[{"kind":"news","title":"Crunchyroll probes breach after hacker claims to steal 6.8M users' data — includes Crunchyroll’s statement","url":"https://www.bleepingcomputer.com/news/security/crunchyroll-probes-breach-after-hacker-claims-to-steal-68m-users-data/","by":"BleepingComputer","date":"2026-03-23"},{"kind":"news","title":"Crunchyroll provides update on data breach claims as the investigation remains ongoing","url":"https://www.gamesradar.com/entertainment/anime-shows/crunchyroll-responds-to-data-breach-claims-and-promises-to-investigate-the-alleged-cyber-attack-we-are-aware-and-working-closely-with-leading-cyber-security-experts/","by":"GamesRadar+","date":"2026-03-24"},{"kind":"advisory","title":"Crunchyroll Data Breach","url":"https://haveibeenpwned.com/breach/crunchyroll","by":"Have I Been Pwned","date":"2026-04-04"},{"kind":"advisory","title":"What do I do if my account has been compromised?","url":"https://help.crunchyroll.com/hc/en-us/articles/360021732331-What-do-I-do-if-my-account-has-been-compromised","by":"Crunchyroll","date":""}],"started":"2026-03-12","closed":"2026-04-04","created":"2026-11-03T21:08:30.717Z","updated":"2026-11-03T21:08:30.717Z","cve_notes":[],"timeline":[{"at":"2026-04-04","added":"2026-11-03T20:51:54.186Z","kind":"other","text":"Have I Been Pwned added 1.2 million email addresses supplied from an allegedly two-million-record dataset offered for sale. This subset does not establish the breach’s full size.","url":"https://haveibeenpwned.com/breach/crunchyroll","by":"Have I Been Pwned","patch":null},{"at":"2026-03-24","added":"2026-11-03T20:51:54.186Z","kind":"other","text":"Crunchyroll’s statement to GamesRadar+ said the information appeared mainly limited to customer-service tickets following a third-party vendor incident. Its investigation continued, with no evidence identified of ongoing access.","url":"https://www.gamesradar.com/entertainment/anime-shows/crunchyroll-responds-to-data-breach-claims-and-promises-to-investigate-the-alleged-cyber-attack-we-are-aware-and-working-closely-with-leading-cyber-security-experts/","by":"GamesRadar+","patch":null},{"at":"2026-03-23","added":"2026-11-03T20:51:54.186Z","kind":"disclosed","text":"BleepingComputer reported the attacker’s claim of eight million stolen tickets containing 6.8 million unique email addresses. Samples it reviewed contained identifying details and support conversations.","url":"https://www.bleepingcomputer.com/news/security/crunchyroll-probes-breach-after-hacker-claims-to-steal-68m-users-data/","by":"BleepingComputer","patch":null},{"at":"2026-03-12","added":"2026-11-03T20:51:54.186Z","kind":"other","text":"The attacker claimed to have gained access through a support agent’s account on this date. They said access was revoked after about 24 hours; Crunchyroll did not confirm that sequence.","url":"https://www.bleepingcomputer.com/news/security/crunchyroll-probes-breach-after-hacker-claims-to-steal-68m-users-data/","by":"BleepingComputer","patch":"na"}],"url":"https://hard.fyi/live/crunchyroll-support-ticket-breach-mar-2026/","json":"https://hard.fyi/api/live?id=crunchyroll-support-ticket-breach-mar-2026"}