2024-03-12 19:21:15
Exactly 15,363 accounts were stolen from the servers of the famous streaming platform Roku, according to several online media which rely on information from Bleeping Computer.
In a notice sent to customers, Year says hackers obtained login credentials and tried to purchase subscriptions in a “limited number” of cases.
Roku revealed that the flaw allowed hackers to access not only accounts, but also credit card data, as first reported by Bleeping Computer.
Attack by mass sending of identifiers
According to Roku, the criminals likely obtained account information exposed in previous data breaches from third-party services. This type of attack, called credential stuffing, involves hackers obtaining emails and passwords exposed in data breaches and trying the combination on other services.
Once they gain access to an account, Roku hackers change the account’s login information, allowing them to take full control of it.
If the account contained credit card information, hackers could also purchase subscriptions in Roku for services such as Netflix, Max, Paramount Plus, Hulu, Peacock, Disney Plus and others.
Year
50¢ per account
Bleeping Computer also discovered that the hackers were selling the stolen information for around 50 cents per account on a dark web hacking platform.
Roku says it has since “protected accounts from further unauthorized access” by asking affected users to reset their passwords. The company also works to cancel and refund unauthorized purchases.
Even if you weren’t affected by this hack, it might be worth checking out HaveIBeenPwned to see if your credentials have been exposed recently. We also suggest changing your Roku password.
1710299136
#Roku #accounts #hacked