15,363 Roku accounts were compromised last year as bad actors gained access to a lot of sensitive data on the platform. Evidence suggests they obtained credit card information and attempted to make purchases.
This news comes from a pair of filings Roku made on March 8 to the attorneys general's offices for Maine and California. They both come with a notice explaining exactly what happened. The document is publicly available if you want to get the full details. But the gist of it is that the hackers bought customer usernames and passwords from a third-party source and then proceeded to enter Roku accounts. This process is known as a credential stuffing attack, according to tech news site BleepingComputer who initially discovered the two notices.
