CRUNCHYROLL has said a hacker stole data related to customer service tickets, with the scope reportedly limited to ticket data after an incident with a third‑party vendor. According to Recorded Future News, the company confirmed on Monday evening that the batch of customer information leaked online over the weekend is legitimate, and that the investigation is ongoing alongside cybersecurity experts.
A Crunchyroll spokesperson said there is no evidence of ongoing access to Crunchyroll systems in relation to these claims, and that information is primarily limited to customer service ticket data following the vendor incident. The vendor involved is Telus, a business process vendor in India with access to Crunchyroll support tickets, and an unidentified threat actor previously claimed to have breached the account of a Telus employee. The outlets BleepingComputer and International Cyber Digest were cited as reporting those claims, according to The Record.