Crunchyroll Third-Party Breach Exposed Nearly 7 Million Subscriber Email Addresses

Crunchyroll disclosed that a breach at a third-party service provider exposed the email addresses of roughly 6.8 million to 7 million subscribers. Reports said the incident affected subscriber contact data rather than payment information or passwords, with the anime streaming company indicating the compromise occurred outside its own core environment.

The exposure raised phishing and account-targeting risks for a large portion of Crunchyroll’s user base, as attackers could use the leaked addresses to impersonate the company or deliver credential-harvesting messages. Coverage of the incident described it as a major supply-chain style data exposure tied to a vendor, underscoring how breaches at external partners can affect millions of customers even when a company’s internal systems are not directly penetrated.