{"id":186042,"date":"2024-03-12T14:16:03","date_gmt":"2024-03-12T21:16:03","guid":{"rendered":"https:\/\/www.mcafee.com\/blogs\/?p=186042"},"modified":"2025-03-26T19:28:58","modified_gmt":"2025-03-27T02:28:58","slug":"15000-roku-accounts-compromised-take-these-steps-to-protect-yourself","status":"publish","type":"post","link":"https:\/\/www.mcafee.com\/blogs\/internet-security\/15000-roku-accounts-compromised-take-these-steps-to-protect-yourself\/","title":{"rendered":"15,000+ Roku Accounts Compromised \u2014 Take These Steps to Protect Yourself"},"content":{"rendered":"

Hackers used one of the oldest tricks in the book to turn a buck. All at the expense of several thousand Roku users.<\/p>\n

Roku notified users that \u201ccertain individual Roku accounts\u201d might have been accessed by someone other than their owners. The method of attack involved \u2026 credential stuffing, where stolen passwords from one account are \u201cstuffed\u201d into other accounts. With this form of attack, a reused password in one account can give access to several others.<\/p>\n

Roku discovered that was the likely cause here, affecting at least 15,000 users.[i]<\/a><\/p>\n

\u201cThrough our investigation, we determined that unauthorized actors had likely obtained certain usernames and passwords of consumers from third-party sources (e.g., through data breaches of third-party services that are not related to Roku).\u201d<\/p>\n

So while Roku itself wasn\u2019t breached, hackers used info from other data breaches to break into these accounts, which were sold online. Reportedly for as little as fifty cents each.<\/p>\n

With access to the compromised accounts, thieves tried to purchase subscriptions and hardware using stored payment options.<\/p>\n

Roku went on to say that these unauthorized actors didn\u2019t get access to \u201csocial security numbers, full payment account numbers, dates of birth, or other similar sensitive personal information requiring notification.\u201d<\/p>\n

The company said it continues to monitor accounts for unusual activity and that it\u2019s working with subscribers to refund any unauthorized charges.<\/p>\n

It has also reset passwords for potentially affected account holders. The company directed users to visit my.roku.com and use the \u201cForgot password?\u201d option on the sign-in page.<\/p>\n

What can I do if I think I got caught up in the Roku breach?<\/strong><\/h2>\n

While an estimated 15,000-plus compromised accounts have been identified, the possibility remains that yet more might be at risk as well. Every Roku subscriber should check their account for unusual activity. From there, we suggest updating your password to a new password that\u2019s both strong and unique.<\/p>\n

With that, we recommend that you take the following steps, which can help prevent and halt any harm being done with your personal info.<\/p>\n

Keep an eye out for phishing attacks.<\/strong><\/h3>\n

With some personal info in hand, bad actors might seek out more. They might follow up a breach with rounds of phishing attacks<\/a> that direct you to bogus sites designed to steal your personal info \u2014 either by tricking you into providing it or by stealing it without your knowledge. So look out for phishing attacks, particularly after breaches.<\/p>\n

If you are contacted by a company, make certain the communication is legitimate. Bad actors might pose as them to steal personal info. Don’t click or tap on links sent in emails, texts, or messages. Instead, go straight to the appropriate website or contact them by phone directly.<\/p>\n

In this case, head to my.roku.com and use the \u201cForgot password?\u201d option as the company suggests.<\/p>\n

Change your passwords and use a password manager.<\/strong><\/h3>\n

Changing passwords now is a must. Strong and unique passwords are best<\/a>, which means never reusing your passwords across different sites and platforms.\u00a0Using a password manager<\/a>\u00a0helps you keep on top of it all, while also storing your passwords securely. Moreover, changing your passwords regularly might make a stolen password worthless because it\u2019s out of date.<\/p>\n

Enable two-factor authentication.<\/strong><\/h3>\n

While a strong and unique password is a good first line of defense, enabling two-factor authentication across your accounts helps your cause by providing an added layer of security. It\u2019s increasingly common to see nowadays, where banks and all manner of online services will only allow access to your accounts after you\u2019ve provided a one-time passcode sent to your email or smartphone. If your accounts support two-factor authentication, enable it.<\/p>\n

Unfortunately at this time, Roku users don\u2019t have this option available to them (although Roku does offer it for its smart home app).<\/p>\n

Consider using identity monitoring, particularly for the dark web.<\/strong><\/h3>\n

An identity monitoring service<\/a> can monitor everything from email addresses to IDs and phone numbers for signs of breaches so you can take action to secure your accounts before they\u2019re used for identity theft.\u200b Personal info harvested from data breaches can end up on dark web marketplaces where other bad actors buy it for their own attacks. Ours monitors the dark web for your personal info and provides early alerts if your data is found on there, an average of 10 months ahead of similar services.\u200b We also provide guidance to help you act if your info is found.<\/p>\n

In the case of the Roku attack, the account thieves purchased compromised accounts on dark web marketplaces. Identity monitoring can help you spot that kind of activity, which then lets you know it\u2019s time to change your passwords.<\/p>\n

Check your credit, consider a security freeze, and get ID theft protection.<\/strong><\/h3>\n

Although Roku said it found no evidence that account thieves gained access to further sensitive info, treat your info like it was anyway. Strongly consider taking preventive measures now. Checking your credit and getting identity theft protection can help keep you safe in the wake of a breach. Further, a security freeze can help prevent identity theft if you spot any unusual activity. You can get all three in place with our McAfee+ Advanced or Ultimate plans. Features include:<\/p>\n