Crunchyroll Investigates Claimed Breach via Telus Support Agent Okta Account

Crunchyroll is investigating claims that a threat actor stole data tied to roughly 6.8 million users after allegedly compromising the Okta SSO account of a support agent associated with Telus International. According to the claims, malware on the agent’s device exposed credentials that were then used to access multiple internal and support platforms, including Zendesk, Slack, Google Workspace Mail, Mixpanel, MaestroQA, Wizer, and Jira Service Management. The attacker said they downloaded about 8 million Zendesk support ticket records and attempted to extort Crunchyroll for $5 million, while public reporting and dark web monitoring also pointed to circulation of sample Crunchyroll-related data in criminal forums.