: In March 2026 (and in a similar 2017 incident), the official site was hijacked, prompting visitors to download a "new desktop app" called Crunchyroll_Secure.exe or contained within a .rar file.
Crunchyroll data breach exposes 1.2 million user email addresses
If you are seeing a file named , it is likely malware and should not be opened. This specific file name is historically associated with a high-profile DNS hijacking incident where attackers redirected the official Crunchyroll website to a malicious server. The Security Incident Crunchyroll_Secure.rar
: A third-party vendor breach exposed roughly 6.8 million user support records , including email addresses, IP addresses, and location data.
: Approximately 1.2 million unique email addresses were leaked and added to the Have I Been Pwned database. How to Stay Safe : In March 2026 (and in a similar
Beyond malware downloads, Crunchyroll has faced several security challenges recently:
: Only download Crunchyroll from the Google Play Store, Apple App Store, or recognized console stores. The Security Incident : A third-party vendor breach
If you have already downloaded this file, . Delete it immediately and run a full system scan with reputable antivirus software. For legitimate use, always: