Following the recent data breach, Roku has revealed that more compromised accounts have been found online, this time affecting more than 500,000 users
Last month, the streaming giant announced that more than 15,000 customers may have had their passwords, usernames, and credit card information stolen by hackers To make matters worse, the culprit hackers used these stolen credentials to access other streaming platforms and purchase streaming devices from Roku's website From there, they sold the stolen Roku accounts on the Dark Web for $050 each
According to a new blog post from the company, the hackers used credential stuffing as a means of accessing these now-compromised accounts This is one of the main reasons they want to avoid password reuse at all costs
Now, however, Roku has provided new information on how it identified a second incident in which approximately 576,00 additional accounts were also compromised Here is everything you need to know about how to keep your Roku account safe from hackers, along with helpful tips
With major data breaches and other security incidents, most companies tend to act only after their brands and customers are compromised After a recent security incident, however, Roku took a different approach
While investigating last month's security incident, the company discovered another similar incident in which over 500,000 additional accounts were compromised by hackers As with the first incident, Roku's investigation found "no indication that Roku was the source of the account credentials used in these attacks or that Roku's systems were compromised in either incident"
Instead, the credentials used in both attacks were likely obtained from another source, perhaps from a previous data breach or data compromise Roku believes that again, this time it was due to password reuse As for the hacker who caused this second security incident, he also used his newly acquired Roku account to make unauthorized purchases of streaming services and streaming hardware
Fortunately, however, they did not access sensitive financial information such as credit card numbers from these stolen accounts
If you are a Roku user like me, you may be worried about your account with news like two security incidents in a row It's good to know that there are simple steps and precautions you can take now to protect your Roku account
The company has already reset passwords for all affected accounts and has also begun notifying customers directly about the incident Similarly, Roku is refunding or reversing charges made to a small number of accounts by unauthorized hackers
At the same time, the company has enabled two-factor authentication (2FA) on all Roku accounts, including those not affected by this incident Therefore, the next time you log into your account, you will need to find the authentication link in the email before you can access it
If you are still concerned about your Roku account, we recommend that you make sure you are using a strong and unique password You can come up with your own or use a free password generator online to create one, but all the best password managers include this feature, allowing you to safely and securely store all your passwords in one place
Even though the Roku side has taken adequate steps, you still want to check your accounts and bank statements carefully for any suspicious activity There is also a possibility that hackers will use the stolen information to launch targeted phishing attacks For these reasons, you should exercise extreme caution when opening or communicating with emails purporting to come from Roku Also, do not click on links purporting to be emails from Roku or download attachments
More information on this matter is expected to be released by Roku once Roku completes its second investigation Also, if you are concerned about whether the company's email is legitimate, please contact Roku's customer support department directly
Comments