[djinnandtonic]

Why does this notification say passwords were compromised and not password hashes? Certainly Roku engineers were better than that?

[supportengineer]

These are most likely people with easy guessed passwords like “password”. The notification suggests the attackers purchased these email/password combos in bulk. That’s likely all this is.