TokyoOne flaw canceled 46,000 paid accounts.
A student near Tokyo allegedly exploited a broken access-control bug in an anime streaming platform that trusted requests it never checked, Japan police said.
Police have not said whether the platform has patched the flaw that let it happen.
Sources: The Record