Hacker Claims To Have Stolen Data From Almost 7 Million Crunchyroll Users
Image Source: Finad Articles
Last week, an anonymous threat actor contacted media outlet BleepingComputer, claiming they had breached Crunchyroll by accessing internal systems through a customer support agent on March 12 at around 9 PM EST. Crunchyroll relies on Telus International for outsourced support services, and the attacker allegedly compromised an employee’s machine using malware to obtain login credentials. From there, they were able to move across several internal tools, including Zendesk, and access a large volume of data. According to the claims, the cybercriminal uncovered 8 million support ticket records, containing about 6.8 million unique email addresses.
The attacker reportedly shared screenshots with BleepingComputer showing the type of information exposed, including full names, usernames, email addresses, IP data and general location details, along with the content of support tickets. Credit card information does not appear to have been part of the hack, although any payment details shared by the users in the breached support tickets would be visible as part of the dataset illegally accessed. In response, Crunchyroll said, "We have not identified evidence of ongoing access to systems in relation to these claims. We are continuing to monitor the situation closely." The company also stated, "We are aware of recent claims and are currently working closely with leading cyber security experts to investigate the matter,” as the investigation remains ongoing.
CultureSlate: Made by humans, for humans.
Please consider supporting our AI-free content via our Patreon page.
READ NEXT:
Source(s): Mashable, Bleeping Computer, Yahoo