Roku, Inc.

Companies / web services

Aliases / services: ロク / Roku / Roku, Inc.
Official website: https://www.roku.com/

Sources identifying the operating company

https://docs.roku.com/api/v1/published/userprivacypolicy/en/us

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Roku accounts

Response status: Not listed
Response information checked: 2026-10-29

Current re-audit: Related incident verified; PHP connection not stated · Research date: 2026-10-29

Roku disclosed credential-stuffing using credentials obtained elsewhere. A second investigation identified about 576,000 affected accounts and some unauthorized purchases, without evidence of a Roku-system breach.

Scope: A PHP connection and response to the current PHP vulnerabilities are not listed.

What users should do

Use a unique password and two-factor authentication. Check suspicious charges or messages through official support.

Official service URL

https://www.roku.com/

Source URLs

2024-04-12 official security noticehttps://www.roku.com/blog/protecting-your-roku-account?library=trueService and operation documentation

Related official sources

Operator and official informationOfficial information directoryIdentifies Roku, Inc. and the relevant service scope.
2024-04-12 official security noticeOfficial notice; link to this PHP incident unconfirmedRoku disclosed credential-stuffing using credentials obtained elsewhere.