Over 15,000 Roku Accounts Breached

Roku, a digital media and streaming content company, recently experienced a data breach affecting over 15,000 of their customers. The breach occurred due to a credential stuffing attack, where threat actors used previously exposed credentials to gain unauthorized access to Roku accounts. Once inside, the attackers altered account details, including passwords, email addresses, and shipping addresses, effectively locking out the legitimate users. This allowed the attackers to make fraudulent purchases using the stored credit card information.

The compromised accounts were then sold on stolen account marketplaces for as little as $0.50 each. Purchasers of these accounts would hijack them with their own information and use the stored credit cards to buy Roku products like cameras, remotes, soundbars, and streaming boxes.

In response to the incident, Roku secured the impacted accounts, forced password resets, and initiated investigations into unauthorized charges. The company took steps to cancel the fraudulent subscriptions and issue refunds to the affects account holders. Roku advised customers to reset their passwords and review their account activity, connected devices, and active subscriptions for discrepancies.

Despite the breach, Roku does not support two-factor authentication, which could have prevented account hijackers even if credentials were compromised. This incident highlights the importance of robust security measures and the potential risks associated with storing credit card information in online accounts. Read the original article for more details.