Get the latest tech news
Roku hit with second major breach of 2024, this time affecting 576,000 users
Roku is now requiring 2FA for all users to prevent another breach.
Roku says the attackers used the login information of account holders, a technique called credential stuffing, to gain access to the streaming service and the payment methods of some users. The hackers were then able to use partial credit card numbers from “about 400 cases” to make unauthorized purchases for subscriptions to streaming services and Roku devices. Requiring additional login steps, the company says, will help its security team “detect and deter future credential stuffing incidents.”
Or read this on The Verge