Massive Security Incident at Roku, Over 500,000 Accounts Compromised - What to Do Now?

Massive Security Incident at Roku, Over 500,000 Accounts Compromised - What to Do Now?

Following the recent data breach, Roku has revealed that more compromised accounts have been found online, this time affecting more than 500,000 users

Last month, the streaming giant announced that more than 15,000 customers may have had their passwords, usernames, and credit card information stolen by hackers To make matters worse, the culprit hackers used these stolen credentials to access other streaming platforms and purchase streaming devices from Roku's website From there, they sold the stolen Roku accounts on the Dark Web for $050 each

According to a new blog post from the company, the hackers used credential stuffing as a means of accessing these now-compromised accounts This is one of the main reasons they want to avoid password reuse at all costs

Now, however, Roku has provided new information on how it identified a second incident in which approximately 576,00 additional accounts were also compromised Here is everything you need to know about how to keep your Roku account safe from hackers, along with helpful tips

With major data breaches and other security incidents, most companies tend to act only after their brands and customers are compromised After a recent security incident, however, Roku took a different approach

While investigating last month's security incident, the company discovered another similar incident in which over 500,000 additional accounts were compromised by hackers As with the first incident, Roku's investigation found "no indication that Roku was the source of the account credentials used in these attacks or that Roku's systems were compromised in either incident"

Instead, the credentials used in both attacks were likely obtained from another source, perhaps from a previous data breach or data compromise Roku believes that again, this time it was due to password reuse As for the hacker who caused this second security incident, he also used his newly acquired Roku account to make unauthorized purchases of streaming services and streaming hardware

Fortunately, however, they did not access sensitive financial information such as credit card numbers from these stolen accounts

If you are a Roku user like me, you may be worried about your account with news like two security incidents in a row It's good to know that there are simple steps and precautions you can take now to protect your Roku account

The company has already reset passwords for all affected accounts and has also begun notifying customers directly about the incident Similarly, Roku is refunding or reversing charges made to a small number of accounts by unauthorized hackers

At the same time, the company has enabled two-factor authentication (2FA) on all Roku accounts, including those not affected by this incident Therefore, the next time you log into your account, you will need to find the authentication link in the email before you can access it

If you are still concerned about your Roku account, we recommend that you make sure you are using a strong and unique password You can come up with your own or use a free password generator online to create one, but all the best password managers include this feature, allowing you to safely and securely store all your passwords in one place

Even though the Roku side has taken adequate steps, you still want to check your accounts and bank statements carefully for any suspicious activity There is also a possibility that hackers will use the stolen information to launch targeted phishing attacks For these reasons, you should exercise extreme caution when opening or communicating with emails purporting to come from Roku Also, do not click on links purporting to be emails from Roku or download attachments

More information on this matter is expected to be released by Roku once Roku completes its second investigation Also, if you are concerned about whether the company's email is legitimate, please contact Roku's customer support department directly

Categories