Disney Plus blames past hacks for user accounts sold online

Nov 20, 2019, 3:51 PM | Updated: 4:04 pm

FILE - Wednesday, Nov. 13, 2019 file photo, a Disney logo forms part of a menu for the Disney Plus ...

FILE - Wednesday, Nov. 13, 2019 file photo, a Disney logo forms part of a menu for the Disney Plus movie and entertainment streaming service. Disney Plus says it doesn’t have a security breach, but some users of the new streaming service have been shut out after hackers tried to break into their accounts. (AP Photo/Steven Senne, File)

(AP Photo/Steven Senne, File)

Disney said Disney Plus account passwords being sold in underground hacking forums are coming from previous breaches at other companies, predating last week’s launch of its streaming service.

The company reiterated Wednesday that it found no evidence of a security breach, and that account problems are limited to “a very small percentage of users” of Disney Plus.

Disney and other traditional media companies are trying to capture the subscription revenue now going to Netflix and other streaming giants. Helped by promotions, including a free year for some Verizon customers, Disney Plus attracted 10 million subscribers on its first day.

The news site ZDNet found stolen account usernames and passwords selling for $3 on underground hacking forums. Disney’s streaming service costs $7 a month or $70 a year.

Despite warnings by security experts, users often reuse passwords at multiple services, meaning a breach at one opens the door for a hacker to gain access to the others.

Users can easily avoid this by using strong passwords that are unique for each service, said Troy Hunt, an Australian security researcher whose “Have I Been Pwned?” website alerts people when their identity information is stolen.

But Hunt said Disney should implement better security measures.

“The Disney situation appears to be yet another credential stuffing attack where hackers exploit a combination of customers reusing passwords and the service provider not providing sufficient defenses to stop it,” Hunt said in an email.

Paul Rohmeyer, a professor at the Stevens Institute of Technology in Hoboken, New Jersey, said he’s surprised that streaming services haven’t yet implemented better security such as multi-factor authentication.

With multi-factor authentication, users must enter a code sent as a text message or email when logging in from a new device.

The code helps ensure that people using stolen passwords or guessing them can’t use a service without also having access to the legitimate user’s phone or email account.

Rohmeyer said services may be hesitant to implement tougher security because they don’t want to be seen as more inconvenient than competitors.

Multi-factor authentication is an option for many non-streaming services, including Google, Facebook and Apple, but the extra security must be turned on. Disney Plus does require codes sent by email when changing account passwords, but it doesn’t use them for logging in from new devices.

Multi-factor authentication is harder to implement for services that are shared in households, as multiple users would need access to the same phone or email account. While Disney Plus, Netflix and Hulu let family members create their own profiles, with separate watch lists and preferences, they all share the same username and password. Apple TV Plus gets around this by having each family member sign in with a separate Apple ID.

We want to hear from you.

Have a story idea or tip? Send it to the KSL NewsRadio team here.

Today’s Top Stories

The OLRGC released an analysis of the expected topics to be discussed during a special session of t...

Simone Seikaly

Extending state flooding emergency, firearm restrictions, among topics for Utah special session

The OLRGC released an analysis of the expected topics to be discussed during a special session of the legislature.

11 months ago

A video recorded by Facebook user Larry Jacquez shows the police response following the shooting in...

Jamiel Lynch, CNN     

At least 3 people killed and 2 officers wounded in a shooting in Farmington, New Mexico, police say

Multiple people were shot and at least three killed in a shooting in Farmington, New Mexico, police said in a Facebook post.

11 months ago

A new release from Intermountain Healthcare shows that younger adults are becoming more susceptible...

Waverly Golden

Younger adults are becoming more susceptible to strokes

A new release from Intermountain Healthcare shows that younger adults are becoming more susceptible to stroke.

11 months ago

If you plan to camp over Memorial Day Weekend, you may want to begin the planning process now....

Allessandra Harris

Camping over Memorial Day Weekend? Plan ahead

If you plan to camp over Memorial Day Weekend, you may want to begin the planning process now.

11 months ago

slcpd on the scene of the deaths...

Josh Ellis

Police: Teen killed by father in murder-suicide in SLC office building

Police responded to the office complex near 3000 S. Highland Drive on Saturday after emergency responders received a call from a community member who reported finding a body.

11 months ago

Melissa Coleman crouches next to her husband, , Brad Coleman, of North Ogden, who sits in a wheelch...

Jenny Carpenter, KSL.com

Young stroke victim survives with quick, lifesaving treatment in northern Utah

After a 36-year-old man had a stroke, he and his wife say to be aware of the signs of stroke and that young people are also at risk.

11 months ago

Sponsored Articles

close up of rose marvel saliva blooms in purple...

Shannon Cavalero

Drought Tolerant Perennials for Utah

The best drought tolerant plants for Utah can handle high elevations, alkaline soils, excessive exposure to wind, and use of secondary water.

Group of cheerful team members high fiving each other...

Visit Bear Lake

How To Plan a Business Retreat in Bear Lake This Spring

Are you wondering how to plan a business retreat this spring? Read our sample itinerary to plan a team getaway to Bear Lake.

Cheerful young woman writing an assignment while sitting at desk between two classmates during clas...

BYU EMBA at the Marriott School of Business

Hear it Firsthand: 6 Students Share Their Executive MBA Experience at BYU’s Marriott School of Business

The Executive MBA program at BYU offers great opportunities. Hear experiences straight from students enrolled in the program.

Skier being towed by a rider on a horse. Skijoring....

Bear Lake Convention and Visitors Bureau

Looking for a New Winter Activity? Try Skijoring in Bear Lake

Skijoring is when someone on skis is pulled by a horse, dog, animal, or motor vehicle. The driver leads the skiers through an obstacle course over jumps, hoops, and gates.

Banner with Cervical Cancer Awareness Realistic Ribbon...

Intermountain Health

Five Common Causes of Cervical Cancer – and What You Can Do to Lower Your Risk

January is National Cervical Cancer Awareness month and cancer experts at Intermountain Health are working to educate women about cervical cancer.

Kid holding a cisco fish at winterfest...

Bear Lake Convention and Visitors Bureau

Get Ready for Fun at the 2023 Bear Lake Monster Winterfest

The Bear Lake Monster Winterfest is an annual weekend event jam-packed full of fun activities the whole family can enjoy.

Disney Plus blames past hacks for user accounts sold online