More than half a million Roku user accounts were hacked in a cybersecurity incident
Last Friday, streaming giant Roku confirmed that about 576,000 user accounts were accessed by hackers using a technique known as "credential stuffing", making it the second security breach this year.
Credential stuffing is a type of automated cyberattack where fraudsters use stolen usernames and passwords from one platform and attempt to log in to accounts on other platforms.
Earlier this year, it found that hackers had accessed about 15,000 Roku user accounts using login credentials such as usernames and passwords that were stolen from another source.
Sign up for Techloy
Techloy.com publishes information about companies, products, careers, and funding in the technology industry across emerging markets globally.
No spam. Unsubscribe anytime.
Roku, which currently has 80 million customers, said that while the hackers made fraudulent purchases of Roku hardware and streaming subscriptions using the payment data stored in those users’ accounts, they "were not able to access sensitive user information or full credit card information."
Although it has reset the passwords for all affected accounts and has begun refunding customers affected, the company has now enabled two-factor authentication (2FA) for all Roku accounts, even for those that have not been impacted by the latest attacks.
It is believed that these countermeasures would help ensure the privacy and security of Roku's user accounts.