Credential stuffing attack compromises 576,000 Roku accounts
576,000 user accounts were compromised at Roku in a credential stuffing attack. Roku disclosed the account breach, which it confirmed as its second security incident.
Key facts
- Affected organisation
- Roku
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- 576,000 user accounts
- Cause / method
- Credential stuffing attack
- Location
- United States
If your data was exposed
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
Timeline
- Roku said 576,000 user accounts had been compromised in a second security incident.
- Roku's additional cyber-attack damage and the exposure of user account information came to light.
4 related reports
Other incidents at Roku
About 15,000 Roku accounts hacked, unauthorised purchases made
Impact: About 15,000 accounts compromised
About 15,000 Roku accounts were compromised in a credential stuffing attack. The attackers used the accounts to subscribe to streaming services, and there were also signs that stolen accounts were sold for $0.50 each and used to buy hardware. Roku disclosed the account compromise.
Related reports: 12 · last report →
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.