.png)
VRChat Data Breach Lawsuit Investigation
Shamis & Gentile P.A., one of the nation's premier class action law firms specializing in data breach cases, is investigating the VRChat, Inc. data breach.
If you were affected by the data breach, your sensitive personally identifiable information may have been exposed, and you may be eligible for compensation.
About VRChat
VRChat, Inc. is a privately held technology company based in San Francisco, California. Founded in 2014 by Graham Gaylor and Jesse Joudrey, the company develops and operates VRChat, a widely used online social virtual world.
The platform allows users to interact using custom 3D avatars and explore countless user-created worlds, supporting both VR and non-VR devices.
What Happened?
On May 12, 2026, VRChat discovered unauthorized access to certain data stored in its cloud environment.
The company contained the suspicious activity and launched a forensic investigation with cybersecurity experts. The investigation determined that an unauthorized third party accessed certain user account information between May 10 and May 12, 2026.
The breach affected a reported 2,436,782 people in the United States, including 8,607 in Maine.
Information Exposed:
- VRChat usernames
- Email addresses associated with VRChat accounts
- VRChat+ subscription statuses
- Login histories (including devices, hardware identifiers, and IP addresses)
- Steam or Meta user IDs linked to VRChat accounts
According to VRChat, passwords, credit card numbers, payment information and government identification documents used for age verification were not compromised.
You May Be Entitled to Compensation
If your information was exposed in the VRChat, Inc. data breach, you may be eligible to join a lawsuit and seek compensation. Lawyers are actively investigating this incident and want to hear from affected individuals.
To find out if you qualify and to take the next step, complete the below form to join the lawsuit.
.svg)