Disney Plus User Accounts Already Found on Hacking Sites - NBC Chicago
National & International News
The day’s top national and international news

Disney Plus User Accounts Already Found on Hacking Sites

Helped by promotions, including a free year for some Verizon customers, the new service attracted 10 million subscribers the day it launched last week.

    processing...

    NEWSLETTERS

    Disney Plus User Accounts Already Found on Hacking Sites
    AP Photo/Steven Senne
    FILE - In this Wednesday, Nov. 13, 2019 file photo, a Disney logo forms part of a menu for the Disney Plus movie and entertainment streaming service on a computer screen in Walpole, Mass. Disney Plus says it doesn’t have a security breach, but some users of the new streaming service have been shut out after hackers tried to break into their accounts.

    Disney says its new Disney Plus streaming service doesn’t have a security breach, but some users have been shut out after hackers tried to break into their accounts.

    The news site ZDNet found stolen account usernames and passwords selling for $3 on underground hacking forums. Disney’s streaming service costs $7 a month or $70 a year.

    Disney Plus comes as Disney and other traditional media companies seek to siphon the subscription revenue now going to Netflix and other streaming giants. Disney is hoping to attract millions of subscribers with its mix of Marvel and Star Wars movies and shows, classic animated films and new series.

    Helped by promotions, including a free year for some Verizon customers, the new service attracted 10 million subscribers the day it launched last week. The popularity led to some technical difficulties in the opening hours. Those problems have largely been resolved.

    Shooting at 2nd Wisconsin High School Leaves Community in Shock

    [NATL] Shooting at 2nd Wisconsin High School Leaves Community in Shock

    A school officer and a student were injured at Wisoonsin's Oshkosh West High School Tuesday morning, when the student was shot after attempting to stab the office with a sharp object. The shooting comes just one day after a school resource officer at Waukesha South High School shot a 17-year-old armed student who refused to drop his weapon.

    (Published Wednesday, Dec. 4, 2019)

    Disney says there’s no indication of a security breach compromising passwords. It says it takes the privacy and security of users’ data seriously. Disney Plus hasn’t said how many subscribers have had security problems.

    It’s likely hackers found email and password combinations re-used by Disney Plus subscribers after they’d previously been stolen from other online services.

    Paul Rohmeyer, a professor at the Stevens Institute of Technology in Hoboken, New Jersey, said he's surprised that streaming services haven't yet implemented better security such as multi-factor authentication, in which users must enter a code sent as a text message or email when logging in from a new device. The code helps ensure that people using stolen passwords or guessing them can’t use a service without also having access to the legitimate user’s phone or email account.

    Rohmeyer says services may be hesitant to implement tougher security because they don't want to be seen as more inconvenient than competitors.

    Multi-factor authentication is an option for many non-streaming services, including Google, Facebook and Apple, but the extra security must be turned on. Disney Plus does require codes sent by email when changing account passwords, but it doesn’t use them for logging in from new devices.

    Key Findings of Fact from 'The Trump-Ukraine Impeachment Inquiry Report'

    [NATL] Key Findings of Fact from 'The Trump-Ukraine Impeachment Inquiry Report'

    The House Intelligence Committee released a report outlining evidence for the impeachment of President Donald Trump.

    (Published Wednesday, Dec. 4, 2019)