This type of hack is called a credential stuffing attack, and it's not Roku's fault. Rather, the hack is partly made possible by customers using the same passwords for multiple accounts they own.

Roku has warned users about a second cyberattack ... It has reassured the vast majority of the 576,000 users caught up in the latest hack that criminals had not managed to access sensitive ...