norm: vrchatno LEI · no CIKMax severity: High

Canonical registry

VRChat, Inc.

ent_2094330938100458ae396428

Compliance scorecard →🔔 Follow entity

Disclosures

1

State AG · 1 jurisdiction

Incidents

—

no linked incident in sample

Max affected reported

2,436,782

nationwide · State AG ME

Leak-site claims

0

none in sample

Identity resolution

Canonical name: VRChat, Inc.
Normalized: vrchat— dedupe via name-norm; Microsoft / MSFT collapse to one row
GLEIF LEI: No match
SEC EDGAR CIK: None — not an SEC registrant
Domain: vrchat.com

Disclosure history (1)newest first

🦞Maine State AGas victim2026-06-10
VRChat, Inc. reported an external system breach (hacking) affecting approximately 2.4 million users, including 8,607 Maine residents. Unauthorized access occurred between May 10 and May 12, 2026. Impacted data included usernames, email addresses, subscription status, login history, and linked Steam/Meta IDs. Passwords and payment information were not compromised. VRChat contained the access, engaged forensic experts, and implemented enhanced security controls. Consumer notifications were sent on June 12, 2026.