Crunchyroll Breach: 100 GB of PII Allegedly Stolen Through Telus Partner
A threat actor claims to have exfiltrated about 100 GB of Crunchyroll customer data—PII including IP addresses, emails, and credit card details—from Crunchyroll after compromising a workstation at Telus’ BPO partner. The breach reportedly occurred on March 12, 2026, with the actor stating access lasted roughly 24 hours and that Crunchyroll has not publicly disclosed the incident. The event fits a pattern seen in the Telus Digital breach, highlighting risk from outsourcing providers handling authentication and billing across client environments.