Roku data breach
Was I affected?
Roku confirmed a breach affecting about 576,000 people, exposing email addresses and passwords. You were affected if Roku emailed you that your password was reset because of unauthorized access in 2024.
| Announced | Apr 12, 2024 |
|---|---|
| When it happened | March-April 2024 |
| People affected | 576,000 |
| Data exposed | Email addresses, Passwords and Other details |
| Status | Confirmed by the company or a regulator filing |
What happened
Roku said about 576,000 accounts were taken over in a second credential-stuffing wave in spring 2024, after an earlier batch of about 15,000. Attackers reused emails and passwords leaked from other sites, and in fewer than 400 cases used stored payment methods to buy subscriptions or hardware. Roku reset affected passwords, refunded charges and made two-step verification mandatory.
What should I do?
- Change your Roku password and any other account that uses the same password, and turn on two-step verification.
- Review your Roku account's subscriptions and purchase history and ask Roku to reverse anything you didn't buy.
- Use a password manager so every account has a unique password.
Check the other services you use →
Sources
- Roku says 576,000 accounts compromised in recent security breach · CBS News (news)
- Roku disclosed a new security breach impacting 576,000 accounts · Security Affairs (news)