Roku, Inc.

The California Office of the Attorney General reported a data breach involving Roku, Inc. on March 8, 2024. The breach likely occurred between December 28, 2023, and February 21, 2024, involving unauthorized access to user accounts through compromised login information obtained from third-party sources. The number of individuals affected remains unknown, and no sensitive personal information was reported as compromised.

Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-582208

TPRM report: https://www.rankiteo.com/company/roku

"id": "rok715072725",
"linkid": "roku",
"type": "Breach",
"date": "12/2023",
"severity": "25",
"impact": "1",
"explanation": "Attack without any consequences"

{'affected_entities': [{'industry': 'Technology',
                        'location': 'California, USA',
                        'name': 'Roku, Inc.',
                        'type': 'Company'}],
 'attack_vector': 'Compromised login information',
 'date_detected': '2024-03-08',
 'date_publicly_disclosed': '2024-03-08',
 'description': 'The California Office of the Attorney General reported a data '
                'breach involving Roku, Inc. on March 8, 2024. The breach '
                'likely occurred between December 28, 2023, and February 21, '
                '2024, involving unauthorized access to user accounts through '
                'compromised login information obtained from third-party '
                'sources. The number of individuals affected remains unknown, '
                'and no sensitive personal information was reported as '
                'compromised.',
 'references': [{'date_accessed': '2024-03-08',
                 'source': 'California Office of the Attorney General'}],
 'title': 'Roku, Inc. Data Breach',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Third-party sources'}