Roku has disclosed a data breach affecting 576,000 user accounts, marking the second security incident in a month. The breach was a result of 'credential stuffing' and led to unauthorized purchases, but sensitive information was not accessed. Roku has reset passwords and will enable two-factor authentication for all accounts.
Key Points
Data breach affecting 576,000 Roku user accounts
Result of 'credential stuffing' attack
No sensitive payment information accessed
Roku reset passwords and will enable two-factor authentication
Pros
Roku identified the breach and took immediate action to protect users
No sensitive information like full credit card numbers was accessed
Two-factor authentication will be enabled for all accounts to enhance security
Cons
576,000 user accounts were compromised
Unauthorized purchases were made in less than 400 cases