Crunchyroll slammed with lawsuit as millions of users left exposed in data breach

Crunchyroll, a popular anime streaming service, is facing a class-action lawsuit following a significant data breach that compromised the personal information of approximately 6.8 million users. The breach, which occurred in March, involved the exposure of email addresses and, in some instances, credit card numbers. Investigators traced the origin of the attack to a third-party vendor, Telus, and a compromised support account.

The lawsuit alleges that Crunchyroll failed to adequately protect user data, violating both state and federal consumer protection laws. The exposed information could lead to identity theft, financial fraud, and other malicious activities, as outlined in the complaint filed by plaintiff Max Agress. Security experts warn that the incident highlights the risks associated with collecting and storing vast amounts of user data.

Crunchyroll stated they are investigating the incident with cybersecurity experts and believe the compromised data is primarily limited to customer service ticket information. Users can now check if their information was exposed through the website “Have I Been Pwned.” The lawsuit seeks to represent affected individuals across the United States and claims Crunchyroll neglected standard cybersecurity practices.

(Source：Daily Mail Online)