Disney+ accounts already found on hacking sites

Disney says its new Disney Plus streaming service doesn’t have a security breach, but some users have been shut out after hackers tried to break into their accounts.

The news site ZDNet found stolen account usernames and passwords selling for $3 on underground hacking forums. Disney’s streaming service costs $7 a month or $70 a year.

Disney Plus comes as Disney and other traditional media companies seek to siphon the subscription revenue now going to Netflix and other streaming giants. Disney is hoping to attract millions of subscribers with its mix of Marvel and Star Wars movies and shows, classic animated films and new series.

Helped by promotions, including a free year for some Verizon customers, the new service attracted 10 million subscribers the day it launched last week. The popularity led to some technical difficulties in the opening hours. Those problems have largely been resolved.

Disney says there’s no indication of a security breach compromising passwords. It says it takes the privacy and security of users’ data seriously. Disney Plus hasn’t said how many subscribers have had security problems.

It’s likely hackers found email and password combinations re-used by Disney Plus subscribers after they’d previously been stolen from other online services.

Paul Rohmeyer, a professor at the Stevens Institute of Technology in Hoboken, New Jersey, said he's surprised that streaming services haven't yet implemented better security such as multi-factor authentication, in which users must enter a code sent as a text message or email when logging in from a new device. The code helps ensure that people using stolen passwords or guessing them can’t use a service without also having access to the legitimate user’s phone or email account.

5 PHOTOS
New shows and movies on Disney+
See Gallery
New shows and movies on Disney+

The Mandalorian

The first-ever Star Wars live action series is set after the fall of the Empire and before the coming of the First Order.

Noelle

Disney's Christmas comedy features Anna Kendrick and Bill Hader playing two siblings, Noelle and Nick Kringle (aka, Santa). When Nick takes a vacation from the stresses of his job, only to not return, it's up to Noelle to find him and save the holiday.

ENCORE!

Kristen Bell brings together former castmates of high-school musicals to recreate their original performances of "Beauty and the Beast," "Annie," and "The Sound of Music" with the help of some of Broadway's best. 

The World According to Jeff Goldblum

Follow Jeff Goldblum as he looks at the fascinating history, science and connections between everyday items like sneakers or ice cream.

Lady and the Tramp

The re-telling of the 1955 Disney classic features the voices of Tessa Thompson (voice of Lady), Justin Theroux (voice of Tramp), Janelle Monae (voice of Peg) and other major stars.  

HIDE CAPTION
SHOW CAPTION
of
SEE ALL
BACK TO SLIDE

Rohmeyer says services may be hesitant to implement tougher security because they don't want to be seen as more inconvenient than competitors.

Multi-factor authentication is an option for many non-streaming services, including Google, Facebook and Apple, but the extra security must be turned on. Disney Plus does require codes sent by email when changing account passwords, but it doesn’t use them for logging in from new devices.

Read Full Story
  • DJI27677.7928.010.10%
    NASDAQ8570.704.030.05%
  • NIKKEI 22523354.4054.310.23%
    Hang Seng26505.28288.241.10%
    DAX13054.80-85.77-0.65%
  • USD (PER EUR)1.110.00010.01%
    USD (PER CHF)1.01-0.0005-0.04%
    JPY (PER USD)108.67-0.0750-0.07%
    GBP (PER USD)1.32-0.0009-0.07%