2026 Crunchyroll — Zendesk/support tickets; HIBP ~1.2M emails (April); actor claims up to ~6.8M–8M

Sony-affiliated anime streaming service Crunchyroll. March 24, 2026: Crunchyroll confirmed to TechCrunch a data breach involving customer service ticket information after an incident with a third-party vendor, stating the investigation was ongoing with security experts and that it had not identified evidence of ongoing unauthorized access. Third-party materials (e.g. International Cyber Digest) suggested access to Zendesk-oriented support workflows via a Telus Digital outsourcing context; TechCrunch noted the company did not confirm whether Telus Digital was the vendor. The hacker separately told BleepingComputer they compromised an Okta SSO account for a Crunchyroll support agent on March 12 and downloaded on the order of ~8 million support ticket records including roughly ~6.8 million unique email addresses—claims not independently verified. TechCrunch characterized the incident as separate from Telus Digital's broader ~1 petabyte breach disclosed the prior week. Earlier social/press narratives included larger ~100GB theft claims; treat unverified figures cautiously. March 2026: discussion on social platforms also referenced separate U.S. class actions (e.g., Video Privacy Protection Act claims involving analytics/marketing disclosures) where complaints sought statutory damages on a per-person or per-violation basis—distinct legal theories from the support-ticket intrusion; amounts and outcomes vary by filing and court. In early April 2026, Have I Been Pwned added the incident with ~1.2 million affected accounts (email addresses only in the HIBP load), citing International Cyber Digest and describing a subset of emails from an alleged ~2 million-record dataset that had reportedly been sold—secondary-market and forum claims should be treated as partially unverified next to corporate statements. Ongoing consumer discussion (e.g., pricing and communications) reflects sentiment, not technical confirmation of scope.