More than half a million Roku users’ data leaked online

The American manufacturer of televisions and set-top boxes Roku warned users about a data leak of 576 thousand accounts. In March, a similar incident caused the hacking of more than 15 thousand Roku accounts.

The company admitted that the attackers used a credential stuffing method that allows fraudsters to gain access to accounts of other online services using stolen logins and passwords.

Roku also said that in fewer than 400 cases, scammers used victims’ accounts to purchase subscriptions to the company’s streaming services and devices using saved payment methods. However, according to the company, the criminals did not gain access to bank card numbers and other payment information of users.

To prevent further incidents, Roku reset the passwords of all affected accounts and informed users of the incident. The company has also enabled two-factor authentication for more than 80 million accounts. The manufacturer promises to compensate or cancel payments in cases where fraudsters gained access to accounts and made purchases.