Just a few weeks after Crunchyroll was accused of unauthorized sharing of user data with a third party, hacker claims to have gained access to 100GB of personally identifiable user data including IP addresses, analytics data and possibly credit card information.
According to reports, the breach happened when an employee working for a TELUS Partner in India allegedly executed malware from a phishing email. The breach allegedly took place on March 12, just a few days after the announcement of a second class action lawsuit against Crunchyroll for allegedly mishandling user data.
It’s important to note that the outsourcing company which has allegedly been breached is not the same company mentioned in the lawsuit and there’s no indication that the information shared with the marketing company was compromised during this breach.