Live data from Hacker News

Roku data breach: Over 15k accounts affected

claimdepot.com

51–60 of 95 posts

Re: Roku data breach: Over 15k accounts affected

#51
post #42
post #7

Related: Ask HN: Fighting back against Roku's forced arbitration? https://news.ycombinator.com/item?id=39503941 (2024-02-25)

It's related as in they are both things about Roku but it's too early to tell if these two events are actually related in some more meaningful way.

In business, if the consumer gets shafted it hard, it not a coincidence.

Re: Roku data breach: Over 15k accounts affected

#52
post #5

Sure wish CISA and SEC would effectively monitor and fine companies that suffer data breaches. After all, we're not being paid for that data, yet we remain the victim of their actions.

First step, stop buying or using any product that monetizes your data

Re: Roku data breach: Over 15k accounts affected

#54
> As a result, unauthorized actors were able to obtain login information from third-party sources and then use it to access certain individual Roku accounts. After gaining access, they then changed the Roku login information for the affected individual Roku accounts, and, in a limited number of cases, attempted to purchase streaming subscriptions.

how limited and what subs

Re: Roku data breach: Over 15k accounts affected

#55

Why does this notification say passwords were compromised and not password hashes? Certainly Roku engineers were better than that?

These are most likely people with easy guessed passwords like “password”. The notification suggests the attackers purchased these email/password combos in bulk. That’s likely all this is.

Re: Roku data breach: Over 15k accounts affected

#56

> As a result, unauthorized actors were able to obtain login information from third-party sources and then use it to access certain individual Roku accounts. After gaining access, they then changed the Roku login information for the affected individual Roku accounts, and, in a limited number of cases, attempted to purchase streaming subscriptions. how limited and what subs

[deleted]

Re: Roku data breach: Over 15k accounts affected

#59

Earlier quoted context omitted.

My kids have been watching TV, they must have accepted it on my behalf. They should have required the parental control pin to accept it.

Can anyone who understands legal stuff explain this? As a layman Roku’s popup seemed wildly insufficient verification that the account owners were the ones accepting these TOS.

not legal, but yes theyll probably get sued for this.

Re: Roku data breach: Over 15k accounts affected

#60

Earlier quoted context omitted.

Reporting requirements exist [1], civil and criminal penalties will require Congressional action. Definitely gross that companies are using forced arbitration to avoid liability for their breaches (first 23andme, now Roku). Call your congressperson. Also, if you are impacted/have standing, consider an FTC complaint [2] and contacting your state’s attorney general. [1] https://www.sec.gov/news/press-release/2023-139 […

> Call your congressperson. I'm sure that after my phone call, my congressperson will drop all the things he is being paid thousands of lobbying dollars to do on behalf of his donors to get right on this. Sorry for the snark, but normal people are powerless to do anything about these shenanigans.

Super cynical. Those people hold outsized power, but they are not invincible by any stretch of the imagination. We hold the power in that we elect the public officials. They care about what we think also.
Post reply on HN