Thousands of subscribers to the recently launched Disney+ online streaming platform have had their accounts hijacked, according to an investigation by cyber security researchers.
The news site ZDNet found stolen account usernames and passwords selling for $3 US on underground hacking forums.
Subscribers reported that hackers accessed their accounts and changed the email address and password details, locking them out. Thousands of subscribers’ accounts have been put up for sale on the dark web.
Cyber security researchers suggest that some accounts were hijacked because people use the same passwords for different sites, some of which may have been previously compromised.