Did VRChat, Inc. have a data breach?

In plain terms

VRChat, Inc., the virtual reality social platform operator, filed a data breach report with the Maine Attorney General on June 10, 2026. The filing indicates that user information including login credentials and payment details may have been exposed, requiring affected individuals to secure their online presence.

VRChat, Inc. officially reported a data breach to the Maine Attorney General's office on June 10, 2026. The details of the incident remain under investigation, but the company’s filing confirms that user data was involved.

The reported exposed data categories include Full Name, Email Address, Password or Credential Hash, Mailing Address, Billing Details, Payment Card Information, Device and IP Connection Logs, and User Profile and Account Metadata. This range of information underscores the potential impact on affected users.

Exposure of this type of data can lead to various risks. Compromised login credentials, even hashed ones, can be exploited for unauthorized access to accounts, both on VRChat and other services if users reuse passwords. Billing and payment card information exposure can increase the risk of financial fraud.

Individuals who receive a direct notification from VRChat, Inc. regarding this incident should take immediate action. It is strongly recommended to change passwords for your VRChat account and any other online accounts where you may have used the same or similar credentials. Enable multi-factor authentication (MFA) wherever available for an added layer of security.

Additionally, monitor your email accounts for any suspicious activity, such as phishing attempts that try to trick you into revealing more personal information. Regularly review financial statements and credit reports for any unauthorized transactions or accounts opened in your name. Staying vigilant is key to mitigating potential harm from data exposure.