Crunchyroll Breach Exposes 100GB of Customer Data via Telus BPO Partner Compromise

A threat actor exfiltrated approximately 100GB of personally identifiable customer data from Crunchyroll after compromising an employee at Telus Digital, the streaming platform's BPO partner. The initial breach on March 12 was contained within 24 hours, but the attacker claims to have extracted IP addresses, email addresses, credit card numbers, and customer analytics data. Crunchyroll has not publicly acknowledged the incident. The breach connects to a wider Telus Digital compromise — the ShinyHunterz ransomware group separately claimed to have stolen 1 petabyte from Telus, including FBI background checks and financial records.