The streaming video platform Roku says that it has uncovered a brand new information breach impacting 576,000 accounts.
The corporate says it uncovered the brand new “incident” whereas investigating final month’s safety breach, during which 15,000 accounts had been compromised.
“After concluding our investigation of this primary incident, we notified affected prospects in early March and continued to watch account exercise intently to guard our prospects and their private data,” the corporate stated in a press release. “Via this monitoring we recognized a second incident, which impacted roughly 576,000 further accounts.”
Reasonably than a hacker breaking into Roku’s system, the assault utilized a method known as “credential stuffing,” with the accounts compromised by hackers that obtained login information from different sources.
“In lower than 400 instances, malicious actors logged in and made unauthorized purchases of streaming service subscriptions and Roku {hardware} merchandise utilizing the fee methodology saved in these accounts, however they didn’t achieve entry to any delicate data, together with full bank card numbers or different full fee data,” the Roku assertion continued.
The corporate says it has reset the passwords for the impacted accounts and alerted the house owners concerning the breach. Roku has greater than 80 million lively accounts. As well as, the corporate says it will likely be turning on two-factor authentication for all accounts to enhance its safety.