Crunchyroll data breach: 1.2M accounts exposed
Severity: medium · Patch status: no-fix-needed · Since 2026-04-04
In March 2026, the anime streaming service Crunchyroll suffered a data breach alleged to have impacted 6.8M users. The exposed data is reported to have originated from the company's Zendesk support system where "name, login name, email address, IP address, general geographic location and the contents of the support tickets" were exposed. A subset of 1.2M email addresses from an alleged 2M record dataset being sold was later provided to HIBP. Exposed data: email addresses. The breach dates from Mar 12, 2026; Have I Been Pwned loaded it on Apr 4, 2026.
What to do
- If you had a Crunchyroll account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
Sources
All live incidents on Threat Watch