Netflix Login Security Breach: 7 Million Accounts Exposed
The breach highlights the importance of online security and the need for users to be vigilant when accessing streaming services, with experts warning that the consequences of such breaches can be severe and far-reaching, affecting not only streaming accounts but also other online services and personal data.
A massive security breach has compromised over 7 million streaming accounts, including Netflix, Disney+, Amazon Prime Video, HBO Max, and Apple TV+, due to spyware infections, phishing scams, and fake browser extensions, with Netflix being the most affected, accounting for over 5.6 million exposed accounts.
The breach, which was caused by malware hidden in unofficial browser extensions, apps, and downloaded software, has put millions of users at risk of account takeovers, data theft, or financial fraud. Experts warn that password reuse makes this leak especially dangerous, as cybercriminals could gain access to online shopping and payment methods, social media profiles, email accounts, and banking and personal data.
The leaked accounts are often sold or shared on underground forums, with the highest number of affected users coming from Brazil, followed by Mexico and India. Kaspersky advises users to change their passwords, use legitimate subscriptions, and be cautious of phishing sites and file extensions when accessing streaming services to protect their accounts.
The report by Kaspersky reveals that the passwords were not stolen directly from the platforms but were collected as part of broader credential theft campaigns. The top countries affected by the hacking scheme are Brazil, Mexico, and India for Netflix, Brazil, Mexico, and Germany for Disney+, and Mexico, Brazil, and France for Amazon Prime Video.
To avoid falling victim to such breaches, experts advise users to secure their devices, avoid suspicious downloads, and be cautious of where their clicks lead. By taking these precautions and being mindful of online security, users can protect their accounts and personal data from cybercriminals.