Roku Reveals Security Breach Impacting 576,000 Accounts

Roku, the streaming service provider, has disclosed a second cyberattack affecting approximately 576,000 user accounts, a considerable escalation from an earlier breach that compromised 15,000 accounts. The company, which boasts over 80 million active accounts, identified fewer than 400 instances where unauthorized purchases of streaming service subscriptions and Roku hardware products were made using stored payment methods. Despite the unauthorized transactions, the hackers did not gain access to sensitive personal information, such as full credit card numbers or other payment information.

In response to the breach, Roku has reset passwords for the affected accounts and has reached out to the customers directly to inform them of the security incident. The company has also initiated refunds or charge reversals for those accounts that were used to make unauthorized purchases. To enhance security, Roku has implemented two-factor authentication (2FA) for all accounts, including those impacted by the recent incidents.

The breach was attributed to "credential stuffing," a tactic where attackers use stolen credentials from other sources to gain unauthorized access to accounts. Roku has advised users to create strong, unique passwords and to remain vigilant in monitoring their accounts for any unusual activity. Additionally, the company is strengthening its controls and deploying countermeasures to detect and prevent future incidents.