Roku hit with second major breach of 2024, this time affecting 576,000 users

Roku says it found another cyberattack on Friday that affected 576,000 users. This is the second breach to affect the company since March.

Roku says the attackers used the login information of account holders, a technique called credential stuffing, to gain access to the streaming service and the payment methods of some users. The hackers were then able to use partial credit card numbers from “about 400 cases” to make unauthorized purchases for subscriptions to streaming services …

access account attackers breach called credential credential stuffing cyberattack found image information login major march roku the company the verge