Crunchyroll is investigating a breach in which an unattributed threat actor claims to have exfiltrated records on approximately 6.8 million users through a third-party customer support vendor. Exposed data reportedly includes customer support records; the full scope of compromised data types remains unconfirmed pending Crunchyroll’s investigation. The primary business risk is regulatory exposure under applicable data protection laws, reputational harm, and potential downstream phishing or credential-stuffing campaigns targeting affected users.