We explain what data was exposed, the potential risks, and the steps you should take now.
VRChat, Inc. has filed a data breach notice revealing that the information of more than 2.4 million users was involved in a data breach.
According to the notice, VRChat experienced unauthorized access to some account data between May 10 and May 12, 2026. The access happened in VRChat’s cloud environment and involved user profile and login-related data.
The information exposed varied by account, but may have included:
VRChat username
Email address associated with the VRChat account
No disclosure via official channels, no offer of identity theft monitoring, no problem
Video game chat platform tells users that driver’s licences and passports were among the forms of data accessed via a third-party…
An “unauthorized party” may have accessed the names of users, the last four digits of credit card numbers, and more.
Names, email addresses and other contact details of users from around the world could also have been taken
A massive trove of 184 million breached records, which have now been taken down, includes user logins for platforms including…
In an unusual misinformation campaign, fraudulent data breach disclosures were submitted to Maine's official breach portal and…
