• Usernames 
• Email addresses 
• Subscription statuses 
• User IDs for other platforms (like Steam or Meta) that are linked to the VRChat account 
• Login histories (including devices, hardware identifiers, and IP addresses)

The organization has stated it has seen no evidence for the compromise if passwords, credit card or payment information, or government identification documents. 

At this time, the organization has contained the incident and engaged in forensic investigation. It has also established further security measures and collaborated with cybersecurity professionals to monitor additional threats. 

The organizations warns users to be cautious of phishing attempts, particularly in the case of unsolicited messages claiming to be from the platform itself.