Crunchyroll Failed to Prevent March 2026 Data Breach, Class Action Lawsuit Alleges

New to ClassAction.org? Read our Newswire Disclaimer

A proposed class action lawsuit alleges that Crunchyroll failed to properly safeguard private consumer information stored in its systems from a March 2026 data breach.

Want to stay in the loop on class action lawsuits that matter to you? Sign up for ClassAction.org’s free weekly newsletter.

The 30-page data breach lawsuit contends that Crunchyroll, a popular anime streaming platform, failed to implement reasonable cybersecurity measures and flouted industry data privacy standards, leading to a massive data breach that reportedly occurred on March 12, 2026.

According to the suit, an unauthorized third party last month gained access to Crunchyroll’s systems after an employee of Telus, one of the defendant’s business process outsourcing partners, executed malware that collected and extracted over eight million customer support tickets, including 6.8 million unique consumer email addresses.

The filing says that confidential consumer information that may have been compromised in the data breach includes full names, usernames, email addresses, IP addresses, approximate location data, user support communications, and partial payment card details, such as the last four digits or expiration date. The case further notes that “[t]he full extent of what hackers took from [Crunchyroll] is still being investigated.”

The class action lawsuit shares that when consumers sign up for Crunchyroll’s streaming service, they are required to share personal information such as their email address and credit card information. The suit asserts that Crunchyroll failed to meet industry cybersecurity standards and guidelines set by the Federal Trade Commission (FTC).

Per the filing, the FTC has published robust guidelines for businesses that collect consumer information, including disposing of information that is no longer needed, encrypting personal data, assessing and understanding network vulnerabilities, and implementing enhanced security policies such as intrusion detection systems. Crunchyroll failed to meet even these most basic requirements despite its obligation to prevent the “involuntary disclosure” of consumer information to unauthorized third parties, the case alleges.

The lawsuit says that Crunchyroll “knew or should have known” of the risk associated with storing consumers’ data and that companies’ outsourcing partners are often targeted by hackers due to the value and amount of personal data that could potentially be extracted.

The filing says that consumers’ private information is extremely valuable to cybercriminals, and that there is a “strong probability” that “entire batches” of stolen information will be put up for sale on the dark web. Access to consumer information means cybercriminals “can do more than just empty a victim’s bank account,” with the case saying there exists the possibility of “all manner of fraud,” including obtaining a driver’s license or ID card with a victim’s name, obtaining jobs with their assumed identity, renting a house, receiving medical services, and even providing the victim’s information to police during an arrest.

According to the suit, the public first became aware of the Crunchyroll data breach from a social media post made on or about March 22, 2026. Despite outside reporting and social media indicating a data breach had occurred, Crunchyroll did not issue a statement that the incident was under investigation until March 23, 2026, the filing states.

The case further alleges that when Crunchyroll announced the data breach, it “deliberately underplayed” the breach’s magnitude and “obfuscated” details about how it occurred, what information was taken, who was responsible, and the extent to which the data at issue was compromised.

The Crunchyroll data breach class action lawsuit seeks to cover all individuals in the United States whose personally identifiable information was exposed in the streaming platform’s March 2026 data breach.

Check out ClassAction.org’s free legal resources to learn how to file a class action lawsuit.