Over 15,000 Roku accounts were breached. Here’s what you need to do

After noticing suspicious exercise on particular person consumer accounts, Roku introduced that 15,363 had been breached by unauthorized customers who possible repurposed usernames and passwords from different breaches. Roku’s investigation discovered that these unhealthy actors then used these accounts to pay for streaming companies.

Whether or not you have been affected or not, that is your newest reminder to not use the identical username and password throughout a number of companies.

Additionally: Your Roku TV will be unusable if you don’t agree to the company’s new terms

Roku despatched the hundreds of affected customers an electronic mail alerting them their account has been accessed and urging them to vary their passwords instantly. Roku believes the corporate’s techniques weren’t breached, solely that its customers had used the identical login data on different companies as on their Roku accounts. Roku stated that delicate data like social safety numbers and full fee data was not compromised.

The breaches reportedly occurred from December 28, 2023, to February 21, 2024, and have been found in January 2024. Roku described the breaches as “unauthorized people utilizing account credentials believed to have been obtained from [a] third-party supply(s) have been used to entry particular person buyer accounts,” in line with the Office of the Maine Attorney General, which informs affected residents of knowledge breaches in compliance with laws, like a number of different US states. 

For the accounts Roku found to be affected, the corporate is requiring a password reset, has canceled any unauthorized subscriptions and transactions, and has issued a refund for unauthorized expenses.

In case you’re an affected Roku consumer, change your account password instantly utilizing the “Forgot password?” possibility on the sign-in web page. In case you’re a Roku consumer and weren’t affected however you utilize the identical password throughout totally different companies, change all of your account passwords instantly. In both case, do not use that very same password once more.

As soon as logged in, evaluate your account settings to examine for any unauthorized subscriptions and logged-in units.

If a foul actor ever makes use of your fee data, like within the case of those breaches, keep alert for fraudulent actions by monitoring your accounts and credit score studies for a minimum of just a few months.