Roku has announced that it has experienced a second cyberattack, impacting 576,000 customers, which is nearly 40 times more than the previous incident. The hackers used a method called 'credential stuffing' by using leaked username and password combinations from other breaches to gain unauthorized access to Roku accounts. However, Roku clarified that its systems were not compromised, and the company was not the source of the account credentials used in the attacks.
Roku has been hit by another cyberattack, this time affecting nearly 40 times more accounts than did a similar incident earlier this year.
In both incidents, Roku said hackers used a tactic known as"credential stuffing," meaning the unauthorized actors took username and password combinations leaked in other breaches to attempt to log into Roku's platform. This method targets those who use the same login information on multiple platforms, so it wasn't an attack on or within the Roku system itself.
In fewer than 400 cases of breached accounts, hackers used stored payment information to purchase streaming service subscriptions and Roku hardware products, but the company said sensitive information like full credit card numbers was not accessed. But Roku is also enacting a new security step for all users, not just those whose data was involved in the breach. All accounts are now fitted with two-factor authentication, requiring users to click on an emailed verification link anytime they try to log into their Roku account.
Roku Cyberattack Security Breach Credential Stuffing Unauthorized Access
Canada Latest News, Canada Headlines
Similar News:You can also read news stories similar to this one that we have collected from other news sources.
Roku hit with another cyberattack, exposing 576,000 accounts' dataLast month, the company announced more than 15,000 accounts had been impacted by a first breach that included fraudulent purchases in some cases.
Read more »
Roku TV accounts hacked in second cyberattack of its kind this yearRoku said the accounts of 576,000 customers had been accessed by hackers – the second incident of “credential stuffing' that’s been reported by the TV streaming service this year.
Read more »
Roku TV Accounts Hacked in Second CyberattackRoku announces that the accounts of 576,000 customers have been accessed by hackers in the second incident of credential stuffing this year.
Read more »
Roku hit with second major breach of 2024, this time affecting 576,000 usersRoku found a second credential stuffing incident that affected 576,000 users, with hackers using customer credit cards to buy services.
Read more »
Roku Says More Than 550K Accounts Impacted in CyberattackStreaming service provider Roku said Friday it identified a second cyberattack that impacted about 576,000 additional accounts while investigating a breach that affected 15,000 user accounts earlier this year. The company, which had more than 80 million active accounts, said ...
Read more »
Roku Discovers Another Cyberattack on 576,000 UsersRoku reports a second cyberattack since March, affecting 576,000 users. Attackers used credential stuffing to gain access to accounts and make unauthorized purchases. However, sensitive information like full credit card numbers and addresses was not compromised.
Read more »