| HN Mirror

Read further and you'll find it was just Roku identifying that users were using the same password across multiple services of which were separately breached and credential stuffed.

If anything this reflects positively on Roku that they announced it