Apparently there has been a data breach at Crunchyroll.
100 GB of Personal Data from users including Credit Cards, Email Addresses, IP's, passwords & more... Are in possession of hackers.
I couldn't find anything on their channel or their news website at this time.
edit 1
What Data Was Stolen? A 100GB Treasure Trove
Initial samples provided by the threat actors suggest a wide-reaching compromise. The 100 GB haul is not just a collection of names and email addresses; it is a deep dive into a customer’s streaming habit, personal information and financial data.
1. Personally Identifiable Information (PII)
The most immediate risk to users comes from the exposure of:
Full Names and Email Addresses: Perfect fuel for future, more targeted phishing campaigns. IP Addresses: Which can be used to approximate user locations and track digital footprints. Account History: Details on subscription tiers and account age.
2. The Financial Risk: Credit Card Details
Perhaps the most alarming claim is the theft of credit card information. While modern systems typically “mask” credit card numbers (showing only the last four digits), the ticketing system often contains unencrypted logs or “receipt” snapshots that may have been swept up in the exfiltration. If full card details were present in support tickets (where users occasionally send screenshots to resolve billing issues), the risk of financial fraud is extreme.
3. Customer Analytics & Support Tickets
By gaining access to the ticketing system, the attacker has access to every conversation users have had with Crunchyroll support. This includes:
Personal complaints. Billing disputes. Verification documents (if any were uploaded).
Still no word from Crunchy itself.
What's new