Crunchyroll Data Breach Exposes 1.2 Million Email Addresses via Zendesk
Crunchyroll, the popular anime streaming platform, experienced a data breach last month after attackers compromised its Zendesk support system. The incident exposed 1.2 million unique email addresses, which were later shared with the breach notification service Have I Been Pwned (HIBP).
According to reports, 82% of the leaked emails were already publicly associated with LinkedIn profiles, raising concerns about potential secondary targeting by threat actors. The breach highlights vulnerabilities in third-party support systems, which are increasingly exploited as entry points for cyberattacks.
No further details on the attack vector or additional compromised data have been disclosed. The incident underscores the risks of supply chain exposures in customer support platforms.
Source: https://www.linkedin.com/feed/update/urn:li:activity:7446057586228998144
Zendesk cybersecurity rating report: https://www.rankiteo.com/company/zendesk
Crunchyroll cybersecurity rating report: https://www.rankiteo.com/company/crunchyroll
"id": "ZENCRU1775283826",
"linkid": "zendesk, crunchyroll",
"type": "Breach",
"date": "3/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '1.2 million',
'industry': 'Streaming/Entertainment',
'name': 'Crunchyroll',
'type': 'Company'}],
'attack_vector': 'Third-party support system compromise',
'data_breach': {'number_of_records_exposed': '1.2 million',
'personally_identifiable_information': 'Email addresses',
'sensitivity_of_data': 'Low (email addresses only, but 82% '
'linked to LinkedIn profiles)',
'type_of_data_compromised': 'Email addresses'},
'description': 'Crunchyroll, the popular anime streaming platform, '
'experienced a data breach last month after attackers '
'compromised its Zendesk support system. The incident exposed '
'1.2 million unique email addresses, which were later shared '
'with the breach notification service Have I Been Pwned '
'(HIBP). 82% of the leaked emails were already publicly '
'associated with LinkedIn profiles, raising concerns about '
'potential secondary targeting by threat actors. The breach '
'highlights vulnerabilities in third-party support systems, '
'which are increasingly exploited as entry points for '
'cyberattacks.',
'impact': {'data_compromised': '1.2 million unique email addresses',
'identity_theft_risk': 'Potential secondary targeting',
'systems_affected': 'Zendesk support system'},
'post_incident_analysis': {'root_causes': 'Vulnerabilities in third-party '
'support systems'},
'references': [{'source': 'Have I Been Pwned (HIBP)'}],
'title': 'Crunchyroll Data Breach Exposes 1.2 Million Email Addresses via '
'Zendesk',
'type': 'Data Breach'}