Credential stuffing

Roku Hit with Cyberattack, 576,000 Users Affected

Roku faces a second cyberattack, affecting 576,000 users due to credential stuffing. The company has reset passwords, refunded unauthorized purchases, and enabled two-factor authentication for all 80 million active accounts to enhance security. Users are advised to check for potential impact and enable additional login security measures.

Roku Discloses Security Breach Impacting Over 15,000 User Accounts

Roku has disclosed a security breach affecting over 15,000 user accounts, with unauthorized individuals attempting to purchase streaming subscriptions using stolen credentials. The company took immediate action to secure affected accounts, mandating password resets and canceling unauthorized subscriptions. Despite the breach, Roku emphasized its commitment to safeguarding user privacy and security, attributing the unauthorized access to compromised usernames and passwords from third-party sources. This incident highlights the ongoing importance of robust security measures and the need for users to exercise caution with their account credentials.