Crunchyroll: Crunchyroll Probes Breach After Hacker Claims To Steal 6.8M Users' Data- BleepingComputer

Crunchyroll Investigates Data Breach After Hacker Claims Theft of 6.8 Million User Records

Crunchyroll, the popular anime streaming platform, is investigating a potential data breach after a hacker claimed to have stolen the personal information of 6.8 million users. The incident came to light when the threat actor, identified as Sp1d3r, posted samples of the allegedly stolen data on a hacking forum, including usernames, email addresses, and hashed passwords.

The breach reportedly occurred in early February 2026, though Crunchyroll has not confirmed the exact timeline or the full scope of the compromised data. The company acknowledged the claims in a statement, stating that it is working with cybersecurity experts to assess the situation and determine the validity of the hacker’s assertions.

While the exposed data appears limited to account credentials, security researchers warn that hashed passwords if cracked could enable further attacks, such as credential stuffing or phishing campaigns. Crunchyroll has not disclosed whether payment information or other sensitive details were accessed.

The incident follows a growing trend of cyberattacks targeting streaming services, with threat actors increasingly exploiting vulnerabilities in user databases for financial gain or notoriety. As of now, Crunchyroll has not issued a mandatory password reset but continues to monitor the situation closely. Further updates are expected as the investigation progresses.

Source: https://www.tradingview.com/news/reuters.com,2026:newsml_FWN40B10O:0-crunchyroll-probes-breach-after-hacker-claims-to-steal-6-8m-users-data-bleepingcomputer/

Crunchyroll cybersecurity rating report: https://www.rankiteo.com/company/crunchyroll

"id": "CRU1774299007",
"linkid": "crunchyroll",
"type": "Breach",
"date": "3/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': '6.8 million',
                        'industry': 'Streaming Services',
                        'name': 'Crunchyroll',
                        'type': 'Company'}],
 'data_breach': {'data_encryption': 'Hashed passwords',
                 'data_exfiltration': 'Yes',
                 'number_of_records_exposed': '6.8 million',
                 'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'Medium',
                 'type_of_data_compromised': ['Usernames',
                                              'Email addresses',
                                              'Hashed passwords']},
 'date_detected': '2026-02',
 'description': 'Crunchyroll, the popular anime streaming platform, is '
                'investigating a potential data breach after a hacker claimed '
                'to have stolen the personal information of 6.8 million users. '
                'The threat actor posted samples of the allegedly stolen data '
                'on a hacking forum, including usernames, email addresses, and '
                'hashed passwords.',
 'impact': {'data_compromised': 'Usernames, email addresses, hashed passwords',
            'identity_theft_risk': 'High'},
 'investigation_status': 'Ongoing',
 'motivation': ['Financial Gain', 'Notoriety'],
 'references': [{'source': 'Hacking forum post by Sp1d3r'}],
 'response': {'communication_strategy': 'Public statement acknowledging the '
                                        'claims',
              'enhanced_monitoring': 'Yes',
              'incident_response_plan_activated': 'Yes',
              'third_party_assistance': 'Cybersecurity experts'},
 'threat_actor': 'Sp1d3r',
 'title': 'Crunchyroll Data Breach Investigation After Hacker Claims Theft of '
          '6.8 Million User Records',
 'type': 'Data Breach'}