Roku announced that about 576,000 accounts were compromised in a recent cyberattack, with hackers making unauthorized purchases on some accounts. This incident follows a previous breach last month that affected over 15,000 accounts. In less than 400 cases, hackers logged in and made unauthorized purchases for streaming subscriptions and Roku hardware products, although the company has vowed to refund those purchases. Roku reassured users that sensitive personal information, such as credit card numbers, was not accessed by the hackers.
The breach was discovered as Roku investigated the previous incident, where hackers gained access to thousands of accounts and attempted to purchase streaming subscriptions. The company identified the unauthorized access as being a result of “credential stuffing,” a technique where hackers use stolen usernames and passwords from one platform to access others. Roku has reset the passwords for all affected accounts and has implemented two-factor authentication for all accounts to enhance security measures.
While the recent breaches did not compromise sensitive payment information, hackers were able to sell stolen account information in an online marketplace. Roku has notified affected customers about the breach and has taken steps to secure the affected accounts. The company remains committed to safeguarding user data and has taken additional measures to prevent future breaches.
In a separate incident, AT&T revealed that personal information, including Social Security numbers, from about 73 million customers was leaked on the dark web. This data breach affected both current and former account holders, with approximately 51 million accounts impacted. AT&T is currently investigating the cause of the breach and has faced multiple class-action lawsuits from affected customers alleging emotional and financial distress. The company is working to address the issues and enhance its security protocols to prevent future breaches.
These cybersecurity incidents highlight the increasing threat of cyberattacks and the importance of companies implementing robust security measures to protect user data. As hackers become more sophisticated in their techniques, businesses must remain vigilant in safeguarding customer information and responding quickly to breaches. Companies like Roku and AT&T are working to address these challenges and enhance their cybersecurity defenses to prevent future data breaches. Customers are encouraged to regularly update their passwords and enable additional security measures like two-factor authentication to further protect their accounts.
