Third-Party-Risk

• Crunchyroll Breached via BPO Partner: 100GB Allegedly Stolen, Still No Disclosure March 23, 2026

  A threat actor claims to have exfiltrated 100GB of customer data from Crunchyroll after compromising a Telus BPO employee on March 12, 2026. Eleven days later, Crunchyroll has made no public disclosure -- raising serious questions about GDPR compliance and third-party vendor risk.