Crunchyroll Lawsuit 2026: Video Privacy & Data Breach Class Actions
Two separate class actions are pending against Crunchyroll in 2026, alleging unlawful sharing of viewing data and failure to prevent a major data breach.
Last reviewed: April 2026
Editorially Reviewed — Content reviewed for accuracy using published legal research, government data, and verified court records. See our methodology
Reviewed by Leonard Goldberg, Editor · Last updated
What the Lawsuit Alleges
In Cabonios et al. v. Crunchyroll, LLC (Case No. 2:26-cv-02373, C.D. Cal., filed March 5, 2026), plaintiffs allege Crunchyroll embedded the Braze Inc. SDK and used it to transmit subscribers' email addresses, device identifiers, and specific video titles to a third-party marketing company without VPPA-compliant consent. A separate suit, Agress v. Crunchyroll, LLC (Case No. 3:26-cv-02553, N.D. Cal., filed March 24, 2026), alleges Crunchyroll failed to maintain adequate cybersecurity, allowing a rogue employee at an outsourcing partner to access support tickets and expose the personal data of roughly 6.8 million users. Both follow a prior $16 million VPPA settlement (Beltran v. Sony Pictures Entertainment d/b/a Crunchyroll) whose claim deadline has passed.
Case Details
Video-privacy case: U.S. District Court for the Central District of California, Case No. 2:26-cv-02373 (filed March 5, 2026). Data-breach case: U.S. District Court for the Northern District of California, Case No. 3:26-cv-02553 (filed March 24, 2026).
Current Status
Who Is Affected & Can You Join?
Video-privacy case (Cabonios): U.S. subscribers — free or paid — whose email addresses, device identifiers, and viewing data were transmitted to Braze Inc. without consent, covering conduct alleged since at least 2022. Data-breach case (Agress): U.S. individuals whose personal information was exposed in the March 2026 Crunchyroll breach. No class has been certified in either case yet; formal eligibility will be defined if and when a settlement is reached.
Is There a Payout?
Case Timeline
- 1
September 2022 — First VPPA Lawsuit Filed
Plaintiffs filed Beltran v. Sony Pictures Entertainment d/b/a Crunchyroll (N.D. Ill.), alleging Crunchyroll shared subscribers' viewing data with Facebook without VPPA consent.
- 2
September 2023 — $16 Million Settlement Agreed
Sony Pictures and Crunchyroll agreed to a $16 million settlement. Eligible claimants who filed valid claims received roughly $30 each. The claim deadline was December 12, 2023.
- 3
January 17, 2024 — Final Approval; Payments Begin April 2024
The court granted final approval; payments of roughly $30 per claimant were distributed from April 2024. That case is now closed.
- 4
March 5, 2026 — New VPPA Lawsuit Filed (Braze SDK)
Plaintiffs filed a new class action (C.D. Cal.) alleging Crunchyroll continued to violate the VPPA by embedding Braze's SDK and transmitting viewing habits and identifiers to a third-party marketing firm without consent.
- 5
March 24, 2026 — Data Breach Class Action Filed
Plaintiffs filed Agress v. Crunchyroll (N.D. Cal.) alleging Crunchyroll failed to protect 6.8 million users whose data was exposed in a March 2026 breach traced to an outsourcing partner. Both cases are pending with no settlement.
Scam & Misinformation Warnings
Whenever a brand lawsuit goes viral, scam sites and bad actors follow. Watch for these red flags:
Fake 'File a Claim Now' Websites
Because the original $16M settlement was widely covered, scam sites may impersonate the old administrator or build lookalike pages claiming a new claims portal is open. No legitimate claims process exists for either 2026 lawsuit.
Requests for Payment or SSN to 'Register'
Real class-action settlements never require upfront fees, credit-card numbers, or Social Security numbers to file a claim. Any site asking for these in connection with a Crunchyroll payout is fraudulent.
Exaggerated Payout Promises ($2,500 Per Person)
Some content misrepresents the VPPA's $2,500 statutory-damages figure as a guaranteed payout. That is the maximum the statute allows if a court rules for plaintiffs — not a settlement figure. Early VPPA settlements typically pay far less.
Frequently Asked Questions
Is the Crunchyroll lawsuit real?
Yes. There are two active 2026 class actions — one under the Video Privacy Protection Act (VPPA) alleging viewing data was shared with analytics firm Braze without consent (Case No. 2:26-cv-02373), and one from a March 2026 data breach affecting roughly 6.8 million users (Case No. 3:26-cv-02553). A prior VPPA lawsuit settled for $16 million in 2024 and is now closed.
Am I eligible to join either 2026 lawsuit?
Potentially. The VPPA case targets U.S. Crunchyroll subscribers — free or paid — whose viewing data was shared with Braze since at least 2022. The data-breach case covers U.S. users whose personal information was exposed in the March 2026 breach. However, no class has been certified and no enrollment process is open yet.
How much money could I receive?
There is no settlement and no payout in either 2026 case. If the VPPA case settles, the prior Crunchyroll settlement paid roughly $30 per claimant — class-action payouts are often modest. The VPPA allows up to $2,500 per violation if litigated to a verdict, but that outcome is rare and not guaranteed.
Can I still file a claim from the 2023 $16 million settlement?
No. The Beltran settlement received final approval on January 17, 2024, and the claim deadline was December 12, 2023. That settlement is fully closed and no new claims can be submitted.
What should I do if I was affected?
For the data breach, change your Crunchyroll password, enable two-factor authentication, and watch for phishing emails. You can check haveibeenpwned.com to see if your email was included. When a real claims process opens, it will be announced through official court documents — not social-media ads.