Roku hit by Cyber Attack

[Bobins]

Roku has been hit by Cyber hackers who gained access to 15,363 accounts and took usernames and passwords that customers may well have used on other websites.

The breach was reported on March 8th and occurred between December 28th 2023 and February 21st 2024.

Users should look to change their passwords on any sites they've used the same credentials!

[mvallevand]

The recommendation to use unique passwords everywhere is sound but at least Roku did say they reset the password of those impacted. However their handling of this resulted in a broadcast to users forcing them to accept a new ToS whereby the can't sue Roku if they want to use their TV or device. Shameful.

Martin

[Bobins]

Martin. I Agree. (Don't sue us for our poor security/supervision)
Personally I use unique Username/password everywhere (having a background in IT Security) but most users don't seem to appreciate that need and that a compromise of this nature can give the hackers access to lots of other sites, potentially with financial risk.
I think a lot of websites should put more effort into warning users that they should not use the same credentials as elsewhere.
Ray.

[mvallevand]

The scary thing about what Roku did is they put this alert on user's TV and gave them 30 days and then their TV wouldn't work. After "owning" a TV for several years can you imagine finding out that Roku still owns it.

Martin