Another hack against Roku exposed the data of 576,000 accounts

Roku has reported a second security breach, affecting 576,000 consumers, nearly 40 times as many as the previous one, which compromised 15,363 accounts earlier this year.

Another hack has struck Roku, affecting almost 40 times as many accounts as the previous one did earlier in the year. Following the initial incident that compromised 15,363 accounts, the streaming service announced on Friday that it had discovered a second security breach affecting 576,000 consumers while it was keeping an eye on account activity.

According to Roku, in both cases, hackers employed a technique called “credential stuffing,” in which the unauthorized parties attempted to access the Roku platform by using login and password combinations that had been made public in previous hacks. This technique wasn't directed on the Roku system itself; rather, it was directed at those who use the same login credentials across several platforms.

Hackers utilized cached payment information to buy Roku hardware and streaming service subscriptions in less than 400 cases of compromised accounts; however, the company claims that sensitive data, such as whole credit card numbers, was not accessible. Roku's first data breach of the year occurred on March 8, where hackers altered user login credentials and used stored payment data for purchases. Bleeping Computer reported that scammers were selling stolen account information for as little as $0.50 on a hacking marketplace, allowing purchasers to access the financial information saved on each profile.