The attacks against Roku were detected and eventually halted, but not before threat actors made off with some valid information.
Account credentials and personal data are hot commodities online, which often going up for sale at low prices so shady characters can move thousands of accounts quickly. This is reportedly what has happened to just over 15,000 Roku customers who had their accounts compromised due to credential stuffing attacks that occurred from December 28th, 2023, to February 21st, 2024. Thankfully, these attacks were detected and eventually halted, but not before threat actors made off with some valid information, allowing malicious data buyers to access the compromised accounts.
On January 4th this year, Roku detected and observed suspicious activity, indicating that some accounts may have been accessed without authorization.
