Your account in danger? Crunchyroll user data leaked

If you thought the worst thing that could happen to your anime streaming service was a server crash in the middle of a season premiere, I have terrible news for you. The cybersecurity nightmare at Crunchyroll has just escalated to the worst possible level. It turns out that all the information stolen from them in early March didn't just stay tucked away in a digital drawer; it has already been sold to the highest bidder on the black market, and it is very likely that your data is on that list.

A virus, technical support, and millions of emails exposed

Let's rewind a bit to understand the magnitude of this disaster. A couple of weeks ago, a technical support employee in India (from a third-party agency hired by the company) fell victim to a malware attack on their computer. This gave an attacker, known online as Mr. Raccoon, the keys to access the customer support database. We now know that this individual managed to sell the records of approximately 1.2 million affected users. And don't think they only took your username; the data leak includes email addresses, IP addresses, locations, and even the full text messages you sent complaining about double charges or app errors.

Corporate silence and the outrage in LatAm

What sparked the most outrage within the otaku community, especially among the fans in LATAM who religiously pay their monthly subscription, was the incredible corporate sluggishness. The platform took many days to speak up when the breach occurred, and up until this moment, they still haven't released a clear statement regarding this new sale on the deep web. The data kidnapper went as far as demanding a massive ransom to not publish the information, and since the company did not give in, the records are already changing hands.

If you are one of those people who reuses the same key for absolutely all your social media accounts, this is your emergency call to change your passwords right now. Security researchers have promised to upload this entire massive database to the free tool Have I Been Pwned in the coming days so that anyone can verify if their privacy was compromised.

Have you already changed all your passwords, or are you trusting that your account went unnoticed in this hack?