Some accounts Disney + in the US and other countries, they were invaded and offered for sale on the dark web starting at $ 3, or even offered for free. There are those who lose access because someone else has changed their registration email and password. Disney denies any security breach. Users may be reusing passwords or being spied on by keyloggers.
THE ZDNet discovered thousands of Disney + accounts being offered for free on hacker forums, or being sold for between $ 3 and $ 11; the subscription costs US $ 6 per month in the USA.
In some cases, the attacker accesses the account, disconnects from all devices and changes email and password. In others, the account is only shared – something allowed by Disney + – without changing the credentials.
Disney says in a statement to BBC that “takes the privacy and security of our users’ data very seriously and there is no indication of a security breach at Disney +”.
Some people have actually reused passwords; two users confessed this to the ZDNet. Others say they had unique passwords for their Disney + accounts, yet they were hacked.
In the case of those who reused passwords, the explanation is simple: the attacker had access to the account using leaked email and password combinations from other sites. In other cases, the user’s computer may have been infected with a keylogger or malware that steals information.
Disney + and Netflix do not have two-factor authentication
One way or another, Disney needs to implement two-factor authentication to avoid this type of problem. Nor does Netflix offer this security feature that requires an additional code, via SMS or app, to sign in.
The situation is more serious for Disney + because the credentials are used for other services, such as amusement parks, Disney Vacation Club and Disney Store. Customers are required to wait hours on the phone or chat, sometimes without access to the account being restored.
Disney + surpassed 10 million users a day after launch. The service had technical problems at the premiere, including login failures and slow streaming. The company explains to the The Verge that the problem was not at Amazon, which provides the platform in the cloud, but in the architecture of the app: “there were some limits in the architecture that became visible, but were not before”.
In Brazil, Disney + is expected to arrive in November 2020.