(Reuters) -Streaming service supplier Roku (NASDAQ:) stated on Friday it recognized a second cyberattack that impacted about 576,000 extra accounts whereas investigating a breach that affected 15,000 person accounts earlier this 12 months.
The corporate, which had greater than 80 million lively accounts, stated the hackers didn’t acquire entry to any delicate info equivalent to full bank card numbers or different cost particulars.
Roku’s shares had been down about 2% in early buying and selling.
Nonetheless, the corporate stated it recognized lower than 400 circumstances the place the data was used to make unauthorized purchases of streaming service subscriptions and {hardware} merchandise utilizing the cost methodology saved within the accounts.
The corporate stated it might refund or reverse costs for accounts the place it has decided unauthorized purchases have been made as a part of the assault.
Roku pinned the unauthorized entry to “credential stuffing”, the place customers could have used the identical credentials throughout completely different platforms.
In the meantime, the corporate has enabled a two-factor authentication for all of the accounts to beef up safety controls.