Hackers have already targeted Disney+, commandeering accounts and selling them for between $3 and $11. I’m not entirely sure why anyone would willingly buy a Disney+ account instead of just pirating all of the content on the service (especially since plenty of content arriving on Disney+ is censored), but apparently it’s already become a hotbed for black market resellers.
CNN Business is reporting that thousands of accounts have been compromised. They cite other sources that have stated that usernames and passwords are quickly changed once the accounts have been compromised.
Disney issued a statement to media outlets proclaiming that their service was not breached and user accounts were not compromised through their database.
According to CNN hackers are simply using username and password combinations from previous hacks to access users’ accounts…
“Disney+ itself does not appear to have been hacked. Instead, Disney+ customers’ credentials were stolen in other security breaches. Many people use the same email logins and passwords for multiple accounts, including the streaming service, which have been stolen during previous security breaches.”
However, even if Disney+ wasn’t directly hacked, the main issue is that Disney+ didn’t launch with two-step authentication.
Even if hackers managed to use an old username and password combination, a secondary e-mail verification when logging in from a different location than the one that a user registered with should have tipped them off. Despite all their privacy woes and anti-consumer practices, even Google and Facebook are prone to sending alerts if someone attempts to log into an account from a different location than the one that you typically log into your account from.
Hilariously enough, CNN and other sites are suggesting you use two-step authentication for your e-mail and mobile services, but if Disney+ doesn’t have two-step enabled, then your account is still at risk of being infiltrated!
(Thanks for the news tip alex9234)
Loading comments…