Massive Security Incident at Roku, Over 500,000 Accounts Compromised - What to Do Now?

Massive Security Incident at Roku, Over 500,000 Accounts Compromised - What to Do Now?

Following the recent data breach, Roku has revealed that more compromised accounts have been found online, this time affecting more than 500,000 users.

Last month, the streaming giant announced that more than 15,000 customers may have had their passwords, usernames, and credit card information stolen by hackers. To make matters worse, the culprit hackers used these stolen credentials to access other streaming platforms and purchase streaming devices from Roku's website. From there, they sold the stolen Roku accounts on the Dark Web for $0.50 each.

According to a new blog post from the company, the hackers used credential stuffing as a means of accessing these now-compromised accounts. This is one of the main reasons they want to avoid password reuse at all costs.

Now, however, Roku has provided new information on how it identified a second incident in which approximately 576,00 additional accounts were also compromised. Here is everything you need to know about how to keep your Roku account safe from hackers, along with helpful tips.

With major data breaches and other security incidents, most companies tend to act only after their brands and customers are compromised. After a recent security incident, however, Roku took a different approach.

While investigating last month's security incident, the company discovered another similar incident in which over 500,000 additional accounts were compromised by hackers. As with the first incident, Roku's investigation found "no indication that Roku was the source of the account credentials used in these attacks or that Roku's systems were compromised in either incident."

Instead, the credentials used in both attacks were likely obtained from another source, perhaps from a previous data breach or data compromise. Roku believes that again, this time it was due to password reuse. As for the hacker who caused this second security incident, he also used his newly acquired Roku account to make unauthorized purchases of streaming services and streaming hardware.

Fortunately, however, they did not access sensitive financial information such as credit card numbers from these stolen accounts.

If you are a Roku user like me, you may be worried about your account with news like two security incidents in a row. It's good to know that there are simple steps and precautions you can take now to protect your Roku account.

The company has already reset passwords for all affected accounts and has also begun notifying customers directly about the incident. Similarly, Roku is refunding or reversing charges made to a small number of accounts by unauthorized hackers.

At the same time, the company has enabled two-factor authentication (2FA) on all Roku accounts, including those not affected by this incident. Therefore, the next time you log into your account, you will need to find the authentication link in the email before you can access it.

If you are still concerned about your Roku account, we recommend that you make sure you are using a strong and unique password. You can come up with your own or use a free password generator online to create one, but all the best password managers include this feature, allowing you to safely and securely store all your passwords in one place.

Even though the Roku side has taken adequate steps, you still want to check your accounts and bank statements carefully for any suspicious activity. There is also a possibility that hackers will use the stolen information to launch targeted phishing attacks. For these reasons, you should exercise extreme caution when opening or communicating with emails purporting to come from Roku. Also, do not click on links purporting to be emails from Roku or download attachments.

More information on this matter is expected to be released by Roku once Roku completes its second investigation. Also, if you are concerned about whether the company's email is legitimate, please contact Roku's customer support department directly.

.

Categories